Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.Encoder.33491

Added to the Dr.Web virus database: 2021-02-22

Virus description added:

Technical Information

To ensure autorun and distribution
Creates or modifies the following files
  • %APPDATA%\microsoft\excel\xlstart\your_files_are_encrypted.html
  • %APPDATA%\microsoft\word\startup\your_files_are_encrypted.html
Creates the following files on removable media
  • <Drive name for removable media>:\your_files_are_encrypted.html
  • <Drive name for removable media>:\roozenedowebinar.pptx
Malicious functions
Reads files which store third party applications passwords
  • %HOMEPATH%\desktop\cveuropeo.doc
  • %HOMEPATH%\desktop\1189.jpeg
  • %HOMEPATH%\desktop\weeklysheet1215.doc
  • %HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc
  • %HOMEPATH%\desktop\tileimage.bmp
  • %HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx
  • %HOMEPATH%\desktop\sdszfo.docx
  • %HOMEPATH%\desktop\pushkin.jpeg
  • %HOMEPATH%\desktop\parnas_01.jpeg
  • %HOMEPATH%\desktop\ovp25012015.doc
  • %HOMEPATH%\desktop\nwfieldnotes1966.docx
  • %HOMEPATH%\desktop\iisstart.html
  • %HOMEPATH%\desktop\february_catalogue__2015.doc
  • %HOMEPATH%\desktop\dialmap.bmp
  • %HOMEPATH%\desktop\dial.bmp
  • %HOMEPATH%\desktop\delete.avi
  • %HOMEPATH%\desktop\archer.avi
  • %HOMEPATH%\desktop\alert.htm
Modifies file system
Creates the following files
  • %TEMP%\idzybk1q.0.cs
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\8\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\6\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\5\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\4\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\3\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\2\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\<INETFILES>\content.ie5\vz0amhs0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\1\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\0\your_files_are_encrypted.html
  • %TEMP%\{645258bb-c6b0-4372-8a33-51c05e2df920}\your_files_are_encrypted.html
  • %TEMP%\{5ca3f0ef-9a3a-44de-aeb4-2adfdcbd51d5}\your_files_are_encrypted.html
  • %TEMP%\wpdnse\your_files_are_encrypted.html
  • %TEMP%\<INETFILES>\your_files_are_encrypted.html
  • %TEMP%\<INETFILES>\content.ie5\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\7\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\9\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\your_files_are_encrypted.html
  • %TEMP%\<INETFILES>\content.ie5\tpot02b1\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\a\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\updates\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\updates\d78bf5dd33499ec2\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\startupcache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache2\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache2\entries\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache2\doomed\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\f\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\e\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\d\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\c\your_files_are_encrypted.html
  • %LOCALAPPDATA%\thunderbird\profiles\10e4mhmg.default\cache\b\your_files_are_encrypted.html
  • %TEMP%\<INETFILES>\content.ie5\y52gqxpm\your_files_are_encrypted.html
  • %TEMP%\your_files_are_encrypted.html
  • %TEMP%\<INETFILES>\content.ie5\nd9pys02\your_files_are_encrypted.html
  • %TEMP%\<INETFILES>\content.ie5\0sdtjnor\your_files_are_encrypted.html
  • %LOCALAPPDATA%\virtualstore\your_files_are_encrypted.html
  • %LOCALAPPDATA%\steam\htmlcache\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\lilo.904\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\lilo.1896\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\history\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\history\history.ie5\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\cookies\your_files_are_encrypted.html
  • %LOCALAPPDATA%\steam\your_files_are_encrypted.html
  • %LOCALAPPDATA%\programs\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\<INETFILES>\content.ie5\fnipbzcw\your_files_are_encrypted.html
  • %LOCALAPPDATA%\programs\common\your_files_are_encrypted.html
  • %LOCALAPPDATA%\opera software\your_files_are_encrypted.html
  • %LOCALAPPDATA%\opera software\opera stable\your_files_are_encrypted.html
  • %LOCALAPPDATA%\opera software\opera stable\cache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\<INETFILES>\content.ie5\sse5viqx\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\52\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\<INETFILES>\content.ie5\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\your_files_are_encrypted.html
  • %TEMP%\setup00000604\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\<INETFILES>\content.ie5\0b5ezxt7\your_files_are_encrypted.html
  • %TEMP%\opera installer\your_files_are_encrypted.html
  • %TEMP%\low\your_files_are_encrypted.html
  • %TEMP%\lilo.1908\your_files_are_encrypted.html
  • %TEMP%\hsperfdata_user\your_files_are_encrypted.html
  • %TEMP%\history\your_files_are_encrypted.html
  • %TEMP%\history\history.ie5\your_files_are_encrypted.html
  • %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\your_files_are_encrypted.html
  • %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\en-us\your_files_are_encrypted.html
  • %TEMP%\cprogram filesopera\your_files_are_encrypted.html
  • %TEMP%\cookies\your_files_are_encrypted.html
  • %TEMP%\adobe\your_files_are_encrypted.html
  • %TEMP%\adobe\acrobat\your_files_are_encrypted.html
  • %TEMP%\adobe\acrobat\10.0\your_files_are_encrypted.html
  • %TEMP%\acrord32_sbx\<INETFILES>\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\updates\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\updates\308046b0af4a39cb\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\acrobat\11.0\search\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\36\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\34\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\33\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\32\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\31\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\30\your_files_are_encrypted.html
  • %LOCALAPPDATA%\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\3\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\29\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\27\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\26\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\25\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\24\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\23\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\35\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\37\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\51\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\21\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\38\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\50\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\5\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\49\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\48\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\47\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\46\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\45\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\44\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\43\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\42\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\41\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\40\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\4\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\39\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\22\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\28\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\20\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\2\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\acrobat\10.0\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\en_ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\nl_nl\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\en_us\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\en_gb\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\de_de\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\microsoft\ime12\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\de_ch\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\userdictionaries\adobe custom dictionary\all\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\linguistics\dictionaries\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\acrobat\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\acrobat\11.0\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\microsoft\imjp12\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\acrobat\11.0\assets\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\microsoft\imjp9_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\microsoft\internet explorer\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\19\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\adobe\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\18\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\17\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\16\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\15\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\14\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\13\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\12\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\11\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\10\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\1\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\0\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\au\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\microsoft\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\microsoft\internet explorer\services\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\zh_cn\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\microsoft\imjp8_1\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds cache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\local extension settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\jumplisticons\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\indexeddb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\indexeddb\https_www.google.ru_0.indexeddb.leveldb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\gcm store\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\hi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\zh_tw\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\zh_cn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\vi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\uk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\jumplisticonsold\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\local extension settings\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\swreporter\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\th\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\local storage\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\swiftshader\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\pnacl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\pepperflash\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\evwhitelist\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\web applications\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_coobgpohoikkiipiblmjeljniedjpjpf\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\web applications\_crx_aohghmighlieiainnegkcijnfilokake\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\storage\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\storage\ext\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\storage\ext\chrome-signin\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\storage\ext\chrome-signin\def\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\storage\ext\chrome-signin\def\gpucache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\session storage\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\tr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\sr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\sl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\widevinecdm\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\es\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\en\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\el\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\de\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\da\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\cs\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\bg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\fil\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ar\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\fr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\hr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\id\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\sk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\fi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\se\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ru\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ro\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\pt_pt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\pt_br\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\pl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\no\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\nl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\lv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\lt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ko\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\ja\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\it\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_locales\hu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\updates\308046b0af4a39cb\updates\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\updates\308046b0af4a39cb\updates\0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\windows mail\backup\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\taskschedulerconfig\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\publisher\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\office\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\office\onetconfig\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\office\groove\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\office\groove\user\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\office\groove\system\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\msdn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\msdn\7.0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\media player\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\media player\transcoded files cache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\media player\sync playlists\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\windows mail\backup\new\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\windows mail\stationery\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\profiles\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\00136b17\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\windows mail\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\profiles\k0im4xo3.default\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\profiles\k0im4xo3.default\thumbnails\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\profiles\k0im4xo3.default\startupcache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\profiles\k0im4xo3.default\safebrowsing\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\profiles\k0im4xo3.default\offlinecache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\profiles\k0im4xo3.default\cache2\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\profiles\k0im4xo3.default\cache2\entries\your_files_are_encrypted.html
  • %LOCALAPPDATA%\mozilla\firefox\profiles\k0im4xo3.default\cache2\doomed\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft help\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\windows sidebar\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\windows sidebar\gadgets\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\windows media\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\windows media\12.0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\office\14.0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\media player\art cache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\media player\art cache\localmls\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\event viewer\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds cache\8od3kwdx\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\webslices~\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds\microsoft feeds~\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds\feeds for united states~\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\device metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds cache\n0acjklk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\device metadata\dmrccache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\device metadata\dmrccache\downloads\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\dbgclr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\dbgclr\7.1\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\credentials\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds cache\z50z8fmq\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\crashreports\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\ime12\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\imjp8_1\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\feeds cache\egikep6z\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\services\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\last active\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\high\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\high\last active\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\high\active\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\recovery\active\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\saz46qqj\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\j3360q78\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\gbjpxfj7\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\internet explorer\domstore\cqzxbnbe\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\imjp9_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\microsoft\imjp12\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\zh_tw\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\53\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\crashes\events\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\crash reports\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\crash reports\events\your_files_are_encrypted.html
  • %APPDATA%\mozilla\extensions\your_files_are_encrypted.html
  • %APPDATA%\mirc\your_files_are_encrypted.html
  • %APPDATA%\mirc\sounds\your_files_are_encrypted.html
  • %APPDATA%\microsoft\internet explorer\your_files_are_encrypted.html
  • %APPDATA%\mirc\scripts\your_files_are_encrypted.html
  • %APPDATA%\mirc\logs\your_files_are_encrypted.html
  • %APPDATA%\mirc\channels\your_files_are_encrypted.html
  • %APPDATA%\microsoft\your_files_are_encrypted.html
  • %APPDATA%\microsoft\word\your_files_are_encrypted.html
  • %APPDATA%\microsoft\uproof\your_files_are_encrypted.html
  • %APPDATA%\microsoft\templates\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\bookmarkbackups\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\crashes\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\your_files_are_encrypted.html
  • %APPDATA%\microsoft\systemcertificates\my\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\datareporting\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\webapps\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\storage\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\storage\permanent\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\storage\permanent\moz-safe-about+home\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\storage\permanent\moz-safe-about+home\idb\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\sessionstore-backups\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\minidumps\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\healthreport\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\gmp-gmpopenh264\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\gmp-gmpopenh264\1.5.3\your_files_are_encrypted.html
  • %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\gmp\your_files_are_encrypted.html
  • %APPDATA%\microsoft\systemcertificates\your_files_are_encrypted.html
  • %APPDATA%\mirc\downloads\your_files_are_encrypted.html
  • %APPDATA%\microsoft\systemcertificates\my\ctls\your_files_are_encrypted.html
  • %APPDATA%\microsoft\systemcertificates\my\crls\your_files_are_encrypted.html
  • %APPDATA%\mozilla\your_files_are_encrypted.html
  • %APPDATA%\microsoft\excel\your_files_are_encrypted.html
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\startmenu\your_files_are_encrypted.html
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\implicitappshortcuts\your_files_are_encrypted.html
  • %APPDATA%\microsoft\imjp9_0\your_files_are_encrypted.html
  • %APPDATA%\microsoft\imjp8_1\your_files_are_encrypted.html
  • %APPDATA%\microsoft\imjp12\your_files_are_encrypted.html
  • %APPDATA%\microsoft\ime12\your_files_are_encrypted.html
  • %APPDATA%\microsoft\document building blocks\your_files_are_encrypted.html
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\your_files_are_encrypted.html
  • %APPDATA%\microsoft\document building blocks\1033\your_files_are_encrypted.html
  • %APPDATA%\microsoft\document building blocks\1033\14\your_files_are_encrypted.html
  • %APPDATA%\microsoft\dbgclr\your_files_are_encrypted.html
  • %APPDATA%\microsoft\dbgclr\7.1\your_files_are_encrypted.html
  • %APPDATA%\microsoft\crypto\your_files_are_encrypted.html
  • %APPDATA%\microsoft\internet explorer\quick launch\your_files_are_encrypted.html
  • %APPDATA%\microsoft\crypto\rsa\s-1-5-21-2922372159-162323534-3872807762-1001\your_files_are_encrypted.html
  • %APPDATA%\microsoft\mmc\your_files_are_encrypted.html
  • %APPDATA%\microsoft\msdn\your_files_are_encrypted.html
  • %APPDATA%\microsoft\systemcertificates\my\certificates\your_files_are_encrypted.html
  • %APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\your_files_are_encrypted.html
  • %APPDATA%\microsoft\speech\your_files_are_encrypted.html
  • %APPDATA%\microsoft\publisher building blocks\your_files_are_encrypted.html
  • %APPDATA%\microsoft\publisher\your_files_are_encrypted.html
  • %APPDATA%\microsoft\protect\your_files_are_encrypted.html
  • %APPDATA%\microsoft\protect\s-1-5-21-2922372159-162323534-3872807762-1001\your_files_are_encrypted.html
  • %APPDATA%\microsoft\proof\your_files_are_encrypted.html
  • %APPDATA%\microsoft\powerpoint\your_files_are_encrypted.html
  • %APPDATA%\microsoft\office\your_files_are_encrypted.html
  • %APPDATA%\microsoft\office\recent\your_files_are_encrypted.html
  • %APPDATA%\microsoft\network\your_files_are_encrypted.html
  • %APPDATA%\microsoft\network\connections\your_files_are_encrypted.html
  • %APPDATA%\microsoft\network\connections\pbk\your_files_are_encrypted.html
  • %APPDATA%\microsoft\network\connections\pbk\_hiddenpbk\your_files_are_encrypted.html
  • %APPDATA%\microsoft\msdn\7.0\your_files_are_encrypted.html
  • %APPDATA%\microsoft\crypto\rsa\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\databases\your_files_are_encrypted.html
  • %APPDATA%\telegram desktop\your_files_are_encrypted.html
  • m:\boot\es-es\your_files_are_encrypted.html
  • m:\boot\en-us\your_files_are_encrypted.html
  • m:\boot\el-gr\your_files_are_encrypted.html
  • m:\boot\de-de\your_files_are_encrypted.html
  • m:\boot\da-dk\your_files_are_encrypted.html
  • m:\boot\cs-cz\your_files_are_encrypted.html
  • m:\boot\fonts\your_files_are_encrypted.html
  • m:\boot\fi-fi\your_files_are_encrypted.html
  • C:\users\your_files_are_encrypted.html
  • %HOMEPATH%\your_files_are_encrypted.html
  • %HOMEPATH%\voip\your_files_are_encrypted.html
  • %HOMEPATH%\videos\your_files_are_encrypted.html
  • %HOMEPATH%\searches\your_files_are_encrypted.html
  • %HOMEPATH%\saved games\your_files_are_encrypted.html
  • D:\your_files_are_encrypted.html
  • %HOMEPATH%\links\your_files_are_encrypted.html
  • m:\boot\fr-fr\your_files_are_encrypted.html
  • m:\boot\zh-tw\your_files_are_encrypted.html
  • m:\boot\zh-hk\your_files_are_encrypted.html
  • m:\boot\zh-cn\your_files_are_encrypted.html
  • m:\boot\tr-tr\your_files_are_encrypted.html
  • m:\boot\bootstat.dat
  • m:\boot\sv-se\your_files_are_encrypted.html
  • m:\boot\ru-ru\your_files_are_encrypted.html
  • m:\boot\pt-pt\your_files_are_encrypted.html
  • m:\boot\pt-br\your_files_are_encrypted.html
  • m:\boot\pl-pl\your_files_are_encrypted.html
  • m:\boot\nl-nl\your_files_are_encrypted.html
  • m:\boot\nb-no\your_files_are_encrypted.html
  • m:\boot\ko-kr\your_files_are_encrypted.html
  • m:\boot\ja-jp\your_files_are_encrypted.html
  • m:\boot\it-it\your_files_are_encrypted.html
  • %HOMEPATH%\pictures\your_files_are_encrypted.html
  • C:\your_files_are_encrypted.html
  • %HOMEPATH%\music\your_files_are_encrypted.html
  • %HOMEPATH%\favorites\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\it\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\dictionaries\your_files_are_encrypted.html
  • %APPDATA%\telegram desktop\tdata\dumps\your_files_are_encrypted.html
  • %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\your_files_are_encrypted.html
  • %APPDATA%\qipguard\your_files_are_encrypted.html
  • %APPDATA%\qip\your_files_are_encrypted.html
  • %APPDATA%\qip\profiles\your_files_are_encrypted.html
  • %APPDATA%\qip\profiles\logs\your_files_are_encrypted.html
  • %APPDATA%\opera software\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\widevinecdm\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\sync extension settings\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\local storage\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\jump list iconsold\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\jump list icons\your_files_are_encrypted.html
  • %APPDATA%\telegram desktop\tdata\your_files_are_encrypted.html
  • %APPDATA%\opera software\opera stable\extension state\your_files_are_encrypted.html
  • %APPDATA%\thunderbird\crash reports\your_files_are_encrypted.html
  • %APPDATA%\thunderbird\profiles\10e4mhmg.default\minidumps\your_files_are_encrypted.html
  • %APPDATA%\thunderbird\profiles\10e4mhmg.default\your_files_are_encrypted.html
  • %HOMEPATH%\favorites\msn websites\your_files_are_encrypted.html
  • %HOMEPATH%\favorites\microsoft websites\your_files_are_encrypted.html
  • %HOMEPATH%\favorites\links for united states\your_files_are_encrypted.html
  • %HOMEPATH%\favorites\links\your_files_are_encrypted.html
  • %HOMEPATH%\downloads\your_files_are_encrypted.html
  • %HOMEPATH%\documents\your_files_are_encrypted.html
  • %HOMEPATH%\desktop\your_files_are_encrypted.html
  • %HOMEPATH%\contacts\your_files_are_encrypted.html
  • %HOMEPATH%\appdata\your_files_are_encrypted.html
  • %APPDATA%\your_files_are_encrypted.html
  • %APPDATA%\yandex\your_files_are_encrypted.html
  • %APPDATA%\winrar\your_files_are_encrypted.html
  • %APPDATA%\thunderbird\your_files_are_encrypted.html
  • %APPDATA%\thunderbird\profiles\your_files_are_encrypted.html
  • %HOMEPATH%\favorites\windows live\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\55\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\54\your_files_are_encrypted.html
  • %APPDATA%\media center programs\your_files_are_encrypted.html
  • %APPDATA%\icq-profile\your_files_are_encrypted.html
  • %APPDATA%\adobe\your_files_are_encrypted.html
  • %APPDATA%\adobe\logtransport2\your_files_are_encrypted.html
  • %APPDATA%\adobe\linguistics\your_files_are_encrypted.html
  • %APPDATA%\adobe\linguistics\dictionaries\your_files_are_encrypted.html
  • %APPDATA%\adobe\headlights\your_files_are_encrypted.html
  • %APPDATA%\microsoft\addins\your_files_are_encrypted.html
  • %APPDATA%\icq-profile\update\splash_banner\your_files_are_encrypted.html
  • %APPDATA%\adobe\flash player\assetcache\3txfxk6a\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\featout\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\11.0\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\11.0\security\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\11.0\security\crlcache\your_files_are_encrypted.html
  • %APPDATA%\adobe\flash player\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\database\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\de\jabber\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\11.0\forms\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\de\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\de\error\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\cz\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\cz\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\cz\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\cz\error\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\bg\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\bg\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\bg\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\bg\error\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\graphics\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\graphics\phone\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\fonts\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\dll\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\11.0\jscache\your_files_are_encrypted.html
  • %APPDATA%\adobe\flash player\assetcache\your_files_are_encrypted.html
  • %APPDATA%\icq-profile\update\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\11.0\collab\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\10.0\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\security\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\61\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\host\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\9\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\8\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\7\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\63\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\62\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\60\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\de\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\6\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\59\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\58\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\57\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\56\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\tmp\your_files_are_encrypted.html
  • %APPDATA%\icq-profile\base\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\10.0\security\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\cache\6.0\muffin\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\10.0\security\crlcache\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\10.0\javascripts\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\10.0\forms\your_files_are_encrypted.html
  • %APPDATA%\adobe\acrobat\10.0\collab\your_files_are_encrypted.html
  • %APPDATA%\.purple\your_files_are_encrypted.html
  • %APPDATA%\.purple\smileys\your_files_are_encrypted.html
  • %APPDATA%\.purple\certificates\your_files_are_encrypted.html
  • %APPDATA%\.purple\certificates\x509\your_files_are_encrypted.html
  • %APPDATA%\.purple\certificates\x509\tls_peers\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\jre1.7.0_11\your_files_are_encrypted.html
  • %LOCALAPPDATA%low\sun\java\deployment\tmp\si\your_files_are_encrypted.html
  • %APPDATA%\microsoft\credentials\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\en\error\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\tr\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\video\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\statuses\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\statuses\vk\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\statuses\set01\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\statuses\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\statuses\icq\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\en\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\sounds\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\valentine\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\static_png\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\smiles\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\set06\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\set05\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\statuses\gtalk\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\set03\your_files_are_encrypted.html
  • %APPDATA%\macromedia\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\macromedia.com\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\macromedia.com\support\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#yastatic.net\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#kiks.yandex.ru\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\#sharedobjects\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\yastatic.net\your_files_are_encrypted.html
  • %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\kiks.yandex.ru\your_files_are_encrypted.html
  • %APPDATA%\identities\your_files_are_encrypted.html
  • %APPDATA%\identities\{a393be9d-3f97-4c05-bba1-37c8b8ca0b32}\your_files_are_encrypted.html
  • %APPDATA%\icqm\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\set04\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\statuses\aim\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\translation\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\koloboks\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\tr\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\pt\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\ru\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\ru\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\ru\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\ru\error\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\pt\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\pt\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\pt\error\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\en\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\kz\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\kz\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\kz\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\kz\error\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\en\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\ua\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\ua\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\tr\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\tr\error\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\emoji\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\cat\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\animated\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\smiles\8march\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\smiles\flash\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\skin_cache\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\skin\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\uz\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\uz\loading\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\uz\jabber\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\uz\error\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\ua\your_files_are_encrypted.html
  • %APPDATA%\icqm\icq\html\ua\error\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\vi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\uk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\tr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\adobe\acrobat\10.0\cache\your_files_are_encrypted.html
  • C:\users\public\your_files_are_encrypted.html
  • C:\users\public\videos\your_files_are_encrypted.html
  • C:\users\public\videos\sample videos\your_files_are_encrypted.html
  • C:\users\public\recorded tv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\adobe\acrobat\11.0\cache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\adobe\acrobat\your_files_are_encrypted.html
  • C:\users\public\recorded tv\sample media\your_files_are_encrypted.html
  • C:\users\public\music\your_files_are_encrypted.html
  • C:\users\public\music\sample music\your_files_are_encrypted.html
  • C:\users\public\libraries\your_files_are_encrypted.html
  • C:\users\public\favorites\your_files_are_encrypted.html
  • C:\users\public\downloads\your_files_are_encrypted.html
  • C:\users\public\pictures\your_files_are_encrypted.html
  • C:\users\public\pictures\sample pictures\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{615bc16d-60f5-482e-91b3-b51d8130963b}\your_files_are_encrypted.html
  • %LOCALAPPDATA%\adobe\color\profiles\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\paxy2tl4.dk6\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\paxy2tl4.dk6\0l5hj4h1.d17\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\paxy2tl4.dk6\0l5hj4h1.d17\manifests\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\paxy2tl4.dk6\0l5hj4h1.d17\google.app_86fd5b6b43e66935_0001.0003_2d95797bbecd3cfc\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\paxy2tl4.dk6\0l5hj4h1.d17\clic...exe_86fd5b6b43e66935_0001.0003_none_f263691f58f224f9\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\data\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\data\6k5hoej1.rj7\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\data\6k5hoej1.rj7\mvp5hrz0.aq7\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\data\6k5hoej1.rj7\mvp5hrz0.aq7\google.app_86fd5b6b43e66935_0001.0003_2d95797bbecd3cfc\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\2.0\data\6k5hoej1.rj7\mvp5hrz0.aq7\google.app_86fd5b6b43e66935_0001.0003_2d95797bbecd3cfc\data\your_files_are_encrypted.html
  • %LOCALAPPDATA%\applicationhistory\your_files_are_encrypted.html
  • %LOCALAPPDATA%\adobe\your_files_are_encrypted.html
  • %LOCALAPPDATA%\adobe\color\your_files_are_encrypted.html
  • C:\users\public\documents\your_files_are_encrypted.html
  • C:\users\public\desktop\your_files_are_encrypted.html
  • %LOCALAPPDATA%\adobe\acrobat\11.0\your_files_are_encrypted.html
  • C:\users\default\your_files_are_encrypted.html
  • C:\users\default\videos\your_files_are_encrypted.html
  • C:\recovery\5acd1c52-fff3-11e4-8273-86a139b74c32\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\sun\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\sun\java\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\sun\java\java update\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{be960c1c-7bad-3de6-8b1a-2616fe532845}v14.0.23026\packages\vcruntimeadditional_x86\your_files_are_encrypted.html
  • %LOCALAPPDATA%\cef\user data\dictionaries\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{a2563e55-3bec-3828-8d67-e5e8b9e8b675}v14.0.23026\packages\vcruntimeminimum_x86\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{6c95b50e-cb5a-4a1f-a7b4-8a6004f8dd6a}\your_files_are_encrypted.html
  • C:\recovery\your_files_are_encrypted.html
  • <Current directory>\your_files_are_encrypted.html
  • %LOCALAPPDATA%\apps\your_files_are_encrypted.html
  • C:\users\default\appdata\local\temp\your_files_are_encrypted.html
  • C:\users\default\appdata\local\microsoft\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\your_files_are_encrypted.html
  • C:\users\default\pictures\your_files_are_encrypted.html
  • C:\users\default\music\your_files_are_encrypted.html
  • C:\users\default\links\your_files_are_encrypted.html
  • C:\users\default\favorites\your_files_are_encrypted.html
  • C:\users\default\downloads\your_files_are_encrypted.html
  • C:\users\default\documents\your_files_are_encrypted.html
  • C:\users\default\desktop\your_files_are_encrypted.html
  • C:\users\default\appdata\your_files_are_encrypted.html
  • C:\users\default\appdata\roaming\your_files_are_encrypted.html
  • C:\users\default\appdata\roaming\microsoft\your_files_are_encrypted.html
  • C:\users\default\appdata\roaming\microsoft\internet explorer\your_files_are_encrypted.html
  • C:\users\default\appdata\roaming\microsoft\internet explorer\quick launch\your_files_are_encrypted.html
  • C:\users\default\appdata\roaming\media center programs\your_files_are_encrypted.html
  • C:\users\default\appdata\local\your_files_are_encrypted.html
  • C:\users\default\saved games\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\he\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\zh_tw\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\zh_cn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\vi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\uk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\tr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\th\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\sv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\sk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ru\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ro\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\pt_pt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\pt_br\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\sr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\sl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\cef\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fil\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\et\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es_419\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\es\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_us\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\en_gb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\el\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\de\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\da\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\cs\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\bg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ar\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\pl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\no\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\nl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ms\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\da\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\application cache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\bg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ar\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extension state\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\databases\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\cache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\application cache\cache\your_files_are_encrypted.html
  • %LOCALAPPDATA%\cef\user data\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\caps\your_files_are_encrypted.html
  • %LOCALAPPDATA%\deployment\your_files_are_encrypted.html
  • %LOCALAPPDATA%\chromium\your_files_are_encrypted.html
  • %LOCALAPPDATA%\chromium\user data\your_files_are_encrypted.html
  • %LOCALAPPDATA%\chromium\user data\default\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\de\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\el\your_files_are_encrypted.html
  • %LOCALAPPDATA%\cef\user data\widevinecdm\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_us\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\en_gb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\cs\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ko\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\ja\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\it\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\id\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\hi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\he\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fil\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\fi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\et\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es_419\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\es\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_locales\lv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\fr\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\d4036846864773e3d647f421dfe7f6ca536e307b\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\d4036846864773e3d647f421dfe7f6ca536e307b\packages\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\dbgclr\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\dbgclr\7.1\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\dbgclr\7.1\1033\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\crypto\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-us\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\s-1-5-18\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\crypto\dss\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\crypto\dss\machinekeys\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\assistance\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\assistance\client\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\assistance\client\1.0\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\crypto\rsa\machinekeys\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\crypto\keys\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\ilscache\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\identitycrl\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\event viewer\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\event viewer\views\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\event viewer\views\applicationviewsrootnode\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\ehome\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\ehome\logs\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\drm\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\drm\server\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\devicesync\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\device stage\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\device stage\task\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-us\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\device stage\device\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\setup\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ab0000000001}\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-0016-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proof.es\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proof.en\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-001b-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-001a-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-0019-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-0018-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-0011-0000-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\mf\your_files_are_encrypted.html
  • %TEMP%\idzybk1q.dll
  • %TEMP%\resba69.tmp
  • %TEMP%\cscba59.tmp
  • %TEMP%\idzybk1q.out
  • %TEMP%\idzybk1q.cmdline
  • C:\msocache\all users\{90140000-0044-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-00a1-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\media player\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-0115-0409-0000-0000000ff1ce}-c\1033\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-00ba-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proof.fr\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\arm\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\arm\reader_10.0.0\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\arm\reader_10.0.0\23770\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\acrobat\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\acrobat\11.0\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\acrobat\11.0\replicate\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\acrobat\11.0\replicate\security\your_files_are_encrypted.html
  • C:\perflogs\your_files_are_encrypted.html
  • C:\perflogs\admin\your_files_are_encrypted.html
  • C:\msocache\your_files_are_encrypted.html
  • C:\msocache\all users\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-0117-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-0117-0409-0000-0000000ff1ce}-c\access.en-us\your_files_are_encrypted.html
  • C:\msocache\all users\{90140000-0115-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ab0000000001}\rdc\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hi\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\common coverpages\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\common coverpages\en-us\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\activitylog\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\support\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\inbox\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\sentitems\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\results\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\cachemanager\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\quarantine\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\localcopy\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\definition updates\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\store\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\scans\history\service\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1033\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\en-us\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\d4036846864773e3d647f421dfe7f6ca536e307b\packages\patch\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\package cache\d4036846864773e3d647f421dfe7f6ca536e307b\packages\patch\x86\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\oracle\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\mozilla\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\mozilla\logs\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft toolkit\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft help\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\wwansvc\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\wpd\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msscan\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\definition updates\{ccca0d05-2e7e-40a5-8ad1-62a4fec8935b}\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\definition updates\updates\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows nt\msfax\queue\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\windows defender\definition updates\backup\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\vault\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\network\connections\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1050\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\netframework\breadcrumbstore\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\8.0\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\3082\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\2052\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1049\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1031\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1046\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1042\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1041\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1040\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1036\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\network\downloader\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\network\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\msdn\7.0\1028\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\office\uicaptions\3082\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\netframework\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\user account pictures\default pictures\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\search\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\search\data\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\search\data\temp\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\search\data\applications\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\rac\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\rac\temp\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\rac\statedata\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\rac\publisheddata\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\rac\outbound\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\cache\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\office\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\office\uicaptions\your_files_are_encrypted.html
  • %ALLUSERSPROFILE%\microsoft\user account pictures\your_files_are_encrypted.html
  • %LOCALAPPDATA%\adobe\acrobat\10.0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\hu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\in\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ja\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\id\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\hy\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\hu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\hr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\hi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\is\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\gsw\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\gl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\fr_ch\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\fr_ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\fr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\fil\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\he\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ka\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\nb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\eu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ne\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ms\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\mr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\mo\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\mn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ml\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\mk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\lv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\lt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\lo\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ln\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ko\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\kn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\km\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\fi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\gu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\it\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\et\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_ve\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_ar\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\en\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\en_xc\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\en_xa\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\en_sg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\en_in\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\en_ie\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\en_gb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\el\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\nl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\de_ch\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\de_at\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\de\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\da\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\cs\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_cl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\bg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_uy\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_co\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\en_za\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_us\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_sv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_py\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_pr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_pe\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_pa\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_ni\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_mx\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_hn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_gt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_ec\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_do\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_cr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_bo\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\es_419\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\no\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\tr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\it\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fil\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\et\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\pt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\en_gb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\en\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\el\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\de\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\da\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\cs\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\es_419\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ja\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\bg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\th\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ru\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ro\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pt_pt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pt_br\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\nl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\nb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\lv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\lt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ko\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\es\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\id\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\html\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\uk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\sl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\te\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ta\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\sw\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\sv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\sr_latn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\sr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\sk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\pl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\si\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ru\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ro\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\pt_pt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\pt_br\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\zh\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\css\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\zh_cn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\tl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\th\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\_platform_specific\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\_platform_specific\x86-32_ru\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\_metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\audio\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\zu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\zh_tw\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\zh_hk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\vi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\bn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\ar\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\id\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ko\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ja\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\it\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\id\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\lv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\nl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fil\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\eu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\et\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\he\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\no\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\zh_cn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\vi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\uk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\tr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\th\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ru\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ro\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pt_pt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pt_br\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\es_419\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\es\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ms\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\en_us\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\en_gb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\nl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ru\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ro\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_pt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pt_br\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\pl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\no\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ms\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\lt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ko\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\ja\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\it\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\zh_tw\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\tr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\th\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\sk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\de\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\da\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\cs\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\bg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ar\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_tw\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\zh_cn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\vi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_locales\uk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\el\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\lt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\en_us\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_cn\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\en_gb\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\en\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\el\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\de\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\da\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\cs\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\bg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\ar\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_tw\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\es\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\es_419\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\et\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\fi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\af\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\images\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\icons\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\fonts\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_metadata\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\hu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\hr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\hi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\he\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\fr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\_locales\fil\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2016.128.11729_0\_locales\am\your_files_are_encrypted.html
  • m:\boot\hu-hu\your_files_are_encrypted.html
  • m:\boot\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\tr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\en\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\he\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fil\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\es\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\el\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hu\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\de\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\da\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\cs\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ca\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\bg\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ar\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\uk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\vi\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\id\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ko\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\th\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sr\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sk\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ru\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ro\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_pt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_br\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\no\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\nl\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lv\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lt\your_files_are_encrypted.html
  • %LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ja\your_files_are_encrypted.html
  • m:\your_files_are_encrypted.html
Deletes the following files
  • %TEMP%\resba69.tmp
  • %TEMP%\cscba59.tmp
  • %TEMP%\idzybk1q.0.cs
  • %TEMP%\idzybk1q.out
  • %TEMP%\idzybk1q.cmdline
  • %TEMP%\idzybk1q.dll
  • %TEMP%\idzybk1q.pdb
Moves the following files
  • from %TEMP%\aspnetsetup_00000.log to %TEMP%\aspnetsetup_00000.log.83b9518a23b60152d2caa590a38c82a394c593502e9c86b6aa270c04e7bffc74
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s004.gif.b755a9bb7b617687fd8c1019c428f1943fb9a376485b1bc734459fe0eb3c7748
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s003.gif.9c15d3727aab9cafe02e7cdadc1a418e4d659afac50c7808afbf1e746e0d7b49
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s011.gif.d666b925a9f291560fbf000d95bd79c6c3b6a3713bb3561bb88a6d4175acee19
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s005.gif.6e91d3e738c31f1674441d55f2eddbd840cd9af24260340f4d529670585ce331
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s009.gif.95bd17ac415637f886b7498bb066ceb8a8dc701909e34f4d3ceef8f1cdd43637
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s002.gif.199fd59f5bfcedacd57fd1ca35521738848899ae50ba72491aec64b946519c5f
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s014.gif.f44d740ba01612c2aa4102bd1fbbc7fb9b4a5f3b6bd9f15121525af90f3fed4c
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s012.gif.ef4b281ff1a1d6c2d041433e8e89402eb8e7006a62ab1f31a512e533ae47f15a
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s010.gif.283339bc13b1ba20b2e61e15dc85a7de5f8bf827fe3bf66341ac8f506f1b8409
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s008.gif.c5a751f1579bdddb459b66c840cb96c1ffe05ded326486cbda31454053f19c63
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s003.gif.8643bdda36edc4e7544241c8964b1e1fd6e8219d22bdbf14ccfefaf948bed123
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s007.gif.752c7de27c598a9d52eeedfc1d5809957097464e33482fc46b773598fe93ee10
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s016.gif.0aa935081af50d3a60977bbec678a11c6a913d4751ed189089e6dc1613b6f47d
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s015.gif.06c905e7bf1f9b8907b98fffa60497ee66d345328be6980fc6778ec2abe96f30
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s011.gif.b5b4ef95cdcf684bc134f30ef4c312b6b34d1327fa32df6b389fe911374d4b39
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s013.gif.803fb84c0d85c0f0b6721b1c02f26f057520905fa422e8d0c95b78c4681f5b5a
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s012.gif.343bed320483bbfeb3161e811b08e61467c1967e66f86e5f774ed155e4583d41
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s014.gif.479dc419f8470ee6d48f80f8b3e36a6b343d02a2e84680dfa152fc0c2a00747c
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s006.gif.a8a4830825ff9a938c943f3e1598494f064ce82c99403b6fe5809d865bab8b10
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s008.gif.c9102be2e18fb186e124385fc6e624a44379b8f2279a824489ea10023552c051
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s004.gif.14b2142569132485e89a2420134221a4741325c2790fe1f77bb7b0d68fff3271
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s009.gif.f70ea33e4bc952da1f7a8cd5dc48e91758eedfe2ddd162915ce077248e595411
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s001.gif.e7ccd0e6640afac4a272392ee64a1e94794c351ba922909f0e47c3b5d7ef9432
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s010.gif.3abc5f2bc59742b0465b35277666035e245ab0286a5722c7b2e3ea973d269560
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s006.gif.5faf41db16e26208017e35653f83cc2353367b7f5c911bdec7870c2e81c75e33
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s004.gif.c737abcb0b51e5bfc51657125dd0fff48bf024080d4472c283b07883d9845d46
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s008.gif.cef9019d3277bd6bafd0eb38fb54dd06747ae6874d253a53cc18112f40c2af75
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s018.gif.cc26ccbea2a8478dd704240d21313eac26cab63e805969c344d270e1135ce875
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s019.gif.739b987fb3aac4fe3fc0ad1cbdeb707594c250b100e2b270d311fabed54b4f04
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s002.gif.2997acf26f9e76fd7b42c7c7c8166e11a5be09bc51e11bbf13aac5ccfbb74740
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s001.gif.be1e4584037b33dba561c5852bb434e9e8ae5a502ca6593d07dd1822a1640a15
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s020.gif.30bd49b635232722963ec0f8866009d7c98a0a62cd83d0e08a013992d95ec423
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s006.gif.5ef0074b18d72736a0485aa5b508f71ab99abb8cac5d4eb817a06d53086d5868
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s017.gif.bff45c84c2de6c134d6ff7636713bdf968f940518850a4d4bcb41acc648bf964
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s016.gif.4f7c0be6a4f1ef16876360a1d895b2e070e9f58a2195c670506866db5a4dba5b
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s015.gif.f94c9b97157ec0ef5e43b00dc54e5e4e6b648bdf67e9b72199b90167fc4d9647
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s001.gif.a7f45e1ac44d3ac08e4147d5f79edf13f7d07297d759fcfe480ce9f6a2f24b4c
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s013.gif.b32f136cebebd588cbd8e22af447bf70b698aca6840d1b774ba93744d1fac475
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s012.gif.6e343b1f56a03e6bc47055e3a6c1d456b9aaffbd5ff8d6fe55c3b9446042c45f
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s010.gif.99a51a808d43e7e1c905b47a73c6d3e692897df6049d3d9031f09ae977271970
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s009.gif.76bef0abbf789e53284b95301311faddf5e46c5f544e76d2974c138e48647679
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s003.gif.14db334816cfeea7ef95a5b9597439df7c40fee89855f4582619f122c3124f49
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s019.gif.82cb64c54c9a851a5c64bbe98bc9c0c4b17c0d5acb086fbf32499cc6773fe356
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s020.gif.10aefc4d70558deaf255493431d83780962542e34358a7b2799f7b9d0b99444a
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s015.gif.c9a2418f6eea2ffc129cb64d842eafebd10d630df3197da574f665ac00e9e47a
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s017.gif.807af4051228c0b2753e7a84dfb90ba106ad9f6a1f819256c948beb1760aff70
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s018.gif.4747151e6620d00217401033047952e1ea9b270a40b9593c66205a1b3b308a03
  • from %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif to %APPDATA%\icqm\icq\smiles\smiles\set05\s016.gif.9133f96a75cd77f345b961c59ab9a73e0ae8814ed8503854f80ccbc2c0034610
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s014.gif.547c37cd7e4b3d98c4d1dfa4bd4b9f9354bbbfb3ebe257660c9422120b5eac73
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s007.gif.2068c904a0686f0787052cc9f54b960d1b42574967e577bc52c4701c3e69a61c
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s005.gif.8e26f1fc910514652574a6cccbc99939f6758819137e0bff9ed3c96a1975e052
  • from %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif to %APPDATA%\icqm\icq\smiles\smiles\set04\s002.gif.7276fb1ca4278596f83e0b1e4ca577f5a5de888f0222c5e651c36a69b1ef717e
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\fool.gif.a1e57f3f402974d6cf1b30a03b28c4625c2aeae83c265feb983e105bd0999442
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\biggrin.gif.8c9b59af9085825b8b3d4f68925674a74ad3b74e4c0ff17a34ab6b0b32260756
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\angel.gif.ed198ad57b11ca8deee1e1997b2202f1bb9a32df32d604b80b0ab33152d41409
  • from %APPDATA%\icqm\icq\smiles\smiles\s008.gif to %APPDATA%\icqm\icq\smiles\smiles\s008.gif.4ab60536f9764d97b1c460df18e93f920761432e5961b5f5d0d63116bc433222
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\53a.gif.69a29387d277005bda4d7afed67166e929606625e80986988724fdded8e45c43
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\52a.gif.95feafaf0a6428cff50e1b2b71461d7ae047c9a87c61a03285880b911744722a
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\51a.gif.d7725d26b41e86a0ba82fe27e6176196a813afbe2a856957853a722332ca9024
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\50a.gif.366f9089ee4d27b3277575494bfec59ff53c6bb00203008ed9418fc44ff62b55
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\49a.gif.a6568c93d5bf65679ac8bf370bc57fdae2d6ce3aaf7331295c3035e824168444
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\bad.gif.ac180bf35f1f5b58fe74300918dbb4f84fe13fefc37545ac0ef0fde436c2b213
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\48a.gif.10679e5fa0938d200d7025550cc9f9ace4121870dcd50c2e110fc70eaa637a78
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\46a.gif.983fba5cf366922b8eaf43ccf419c730cab371331b6393775158b0a12f0f7f03
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\45a.gif.9ddd91d5aefffd1298ded7c5e8d1f77b126e2f5620b34c2d9f22b90a3a663107
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\44a.gif.c2bd1e2b68fd06f231b566d2fd8b6eb2048e114d150014182b283494e2b2337d
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\28a.gif.97134eef9673333e707ad1ced2e5de760d8cbb218abead8916b494e8cb201752
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\27a.gif.133ac32983bf4389b409d5dae208b2eb1f805677d91c6d4fe01559b32c97e46c
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\41b.gif.f06754062a222db02917ec229c3a8f9ae49969a11bd40d478d229dea296be078
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\26a.gif.aa7e9689426b5aea334adcb3a24815cf38e1215ef84c5c4de2e5cbf0519c9571
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\14a.gif.b4ce5d1eeda9a0b35818f053dc3575b274d747636682944153f360ca1c272807
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\07a.gif.b22d87c341addafa48daae6b52089b329a3ace071c16d569eb37cf91d0cd4d42
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\13a.gif.2fb083d2f2953eb842122480192cef855edd27430c3bd7b66714ce7162edf317
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\47a.gif.ccb299bba93e7fcab113170ed90e1cdc4b5b07fafb579faa1ab7ca0aff89d03a
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dance.gif.4368737a9dcb32bb2a3002cabb4c6308d205537e96199ccd3bcf6cdc15f35149
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blush.gif.b40f54dc59424a9cef33e164fb7f27d8c3a45578d9d775903774f5917110d24a
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\dirol.gif.7d299e3f19c2e4d04617dcc37fd20319381cedeb249f72a8223e71cea95ac33d
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rolleyes.gif.2e1617c5c380774519bc1e19fc2e0787c68c13e4fece8af6de3e40329243cc3d
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\sad.gif.5761a9ae2a33d568f44596f444270e29634dd12d0992fe3d3edc0f07a5cba84c
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\rofl.gif.1bc93815a9db910d28873275ef629514526a153a859d3874243052f46847f05e
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\smile.gif.e47710188b56d16dd3ae1f45b7aa93fd25fd0ad24a3ac606fc636bc908f5cb69
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\yahoo.gif.b8baa74611371e063531c06021253344383ad52d403cd97a3995452d96eea462
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\pardon.gif.8d56b064c8ca04a9df2ce813653b38eb218dbc50b86515c836e0e276dbd1226e
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wink.gif.ce19c96dee3a2a3fe6cd8a91fa5c268cdd23e1f314a3f48ffa4676def1bf0103
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\wacko2.gif.81251026d50958f561d2004a4a74a4787a5fbf7abd34630ba1819c7666536c46
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\unknw.gif.e23a9edcfab2916ddadbaeb352159dc57880d4a772dcd944326265f3913a4e29
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shout.gif.977af60b1223c44b7bb0907fe729f1d8c2dc7944f89f78dbaaebbffd52a9be09
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\shok.gif.c8256e779034aba27165768174b6cbae6abf4a76b6e926612501789ac2147b64
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\scratch_one-s_head.gif.ab5808ff6a24bc9c89432b6e7e7c4b7c3e924bf7953931eccfd838ad4109c434
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\nea.gif.73158bce81b014f0b9010f7ca20e5a4a7beb0db2ce5cc269617bbe3a1c6ac459
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\facepalm.gif.e046e88469960eb0e0ebf664cdb65db3771a12d12c7ac3d0d97d4df3ae719623
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\music.gif.9006ee78edf6c4183d4b6dd0ddfdddbc54f8438f615c17f60667058b9cfec61a
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\man_in_love.gif.adda9f78d2eb8a0dd0bcc354769423655511cac383250c5ac32cd984d180346a
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\kiss_mini.gif.09dc53d4fcb42e6ec330dc104aa5642fd805f4b0262c211f36946be90c158547
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\good.gif.1bb1c16dcef2e83e33262718184e301ec02f9e8e50206cd2d44a09103331994b
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\mocking.gif.ae0b33a1a78d2297e41df193b135e10a016f7d924b20d235d5c0b4a22bb04541
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\diablo.gif.589b15aea77c26786fa3a820470dbb98417fe7333e49815e928c02685ded281c
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\cray.gif.f84b0f05e07faa67ce8b4b2d5b388781f16a35e3979886b3b944f1b2f8850166
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\crazy.gif.6d5bbed3b7239e74f28714e0f4b0f1f2d295a59eebad9940d539b2f0716b0e2d
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\blum.gif.4e8464ca19a07d59d65dcb6564f3baa36a03108a5babdccc70e8002e5e3cb102
  • from %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\set03\drinks.gif.7236851000342f5eca2257b866925aad5c1537e66b7b5b5d8f3e107ab3ee9b01
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s013.gif.57fbe4c15dcc80d81ec03036d385416e6b558f57821848dc29f32c0d7ec12029
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\aaa.gif.e2249cc1b0f647c826a87243b7fbc6e1962e435828c8f2244487b322c2f21915
  • from %APPDATA%\thunderbird\profiles\10e4mhmg.default\prefs.js to %APPDATA%\thunderbird\profiles\10e4mhmg.default\prefs.js.3293e63e8a996f126baaba4a81d8ff087e19651f849ac0f6ea368a7d39e5713b
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\angry.gif.808b5ed4b3c54a5cee0fad67e8979ea79828921860d7ccdb9ae335b63ca91d7e
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\search.json to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\search.json.42d785a8a8df9c13730f1ec736917950435f7720d718c0b4ca514fb7e6b5573a
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\sessionstore-backups\recovery.js to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\sessionstore-backups\recovery.js.1605427cc2b1761ad64b60062e44f0ddf460056bf1e518bc24a4a27e674f737e
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\revocations.txt to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\revocations.txt.b7422efaf7cb09972975dd875f7da126cab241457a53eae106bf17671b66fb04
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\prefs.js_20150521041724.backup to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\prefs.js_20150521041724.backup.f6cc46b366a05752a64c3a8beee747a722680cfc6a3ce6611cf9699fc43edd79
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\sessionstore-backups\previous.js to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\sessionstore-backups\previous.js.6e4065e837f1de03c963ea9fbbd2012361f5095adab44a682408f8cacee1ca56
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\gmp-gmpopenh264\1.5.3\gmpopenh264.dll to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\gmp-gmpopenh264\1.5.3\gmpopenh264.dll.b4a3187bd83ed6de8659000d47b468048c91e72008f45c210298d9ce9c21733f
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\extensions.json to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\extensions.json.3fdb3c0ae3f1e4cd7e6ade999d4d3d2ba95590f0416a58ea1fff5f2f495e146b
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\chromeappsstore.sqlite to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\chromeappsstore.sqlite.07549aa3824aa1cb23123ffdc2394b7e344558da570642ab125ce4edf95d800c
  • from %APPDATA%\mirc\scripts\popups.ini to %APPDATA%\mirc\scripts\popups.ini.c327415ab69ccd836c26f0de03a5facc32c2e548349f44dba806653336e06e1c
  • from %APPDATA%\mirc\servers.ini to %APPDATA%\mirc\servers.ini.7ca2818a66f5d3fbf668b7eb56e756e8c724a8841f07484c9becc3b7253db633
  • from %APPDATA%\icqm\icq\sounds\otprav.wav to %APPDATA%\icqm\icq\sounds\otprav.wav.859c414da90c0854723b5fc64cc7ed96667aad7b60d532d88af9ce61efc1b83d
  • from %APPDATA%\mirc\mirc.ini to %APPDATA%\mirc\mirc.ini.8eac185fd134638023bec9be93351ff67cb1e990f4b9a252aafbca6759ec6041
  • from %APPDATA%\microsoft\document building blocks\1033\14\built-in building blocks.dotx to %APPDATA%\microsoft\document building blocks\1033\14\built-in building blocks.dotx.e57ab2b1fa08a29ecd985396fa638d9988e8e910dee77d6fafdec300e99d6211
  • from %APPDATA%\icqm\vivo.dll to %APPDATA%\icqm\vivo.dll.9cd25705418838e26e1b922be7519b5f04d375b632e4f99bde01660c0c76fb69
  • from %APPDATA%\icqm\sciter32.dll to %APPDATA%\icqm\sciter32.dll.32b129e0bc43dac4a3cfd9dda25e4ed32cfe030ac84d4e0f302ef91746b37308
  • from %APPDATA%\icqm\mrainplaceviewer.dll to %APPDATA%\icqm\mrainplaceviewer.dll.9f20ecd203acc3385b5a6b864ea39f5631801a50eaac4ec6f19d6053e8a88409
  • from %APPDATA%\icqm\libvoip_x86.dll to %APPDATA%\icqm\libvoip_x86.dll.b9b912560a43a04b1b0e90e79d212991344bbcb03c27705d50d3e2e7f0bd2d2e
  • from %APPDATA%\icqm\icq\sounds\letter.wav to %APPDATA%\icqm\icq\sounds\letter.wav.d2fef26b47b11cd1a21977d3ed6c20c046796c0d5eae6337657e8b27710e711a
  • from %APPDATA%\icqm\icq\sounds\error.wav to %APPDATA%\icqm\icq\sounds\error.wav.d3012892f2b4ce40bbbd4f5b9de2247fe17d9a7e33bb717b22dde25f29687b54
  • from %APPDATA%\icqm\icq\sounds\ring.mp3 to %APPDATA%\icqm\icq\sounds\ring.mp3.913472fddf92f12187a7bc9513862fc49f143219b453e89eb35a757ef4f72654
  • from %APPDATA%\icqm\icq\sounds\voiceend.wav to %APPDATA%\icqm\icq\sounds\voiceend.wav.3696eae833d6d5ac919f1fa66b41d5f2c60a08e27d3f7f770d0652e7f09a1256
  • from %APPDATA%\icqm\icq\sounds\test_sound.wav to %APPDATA%\icqm\icq\sounds\test_sound.wav.da7802b862aac14bc230437be6eb9e5cf790ac4402a11836a536bdd0148f0842
  • from %APPDATA%\microsoft\templates\normal.dotm to %APPDATA%\microsoft\templates\normal.dotm.d133007dde52139088845a82661b5a8192962477c2e273ca76992b4272b70e2d
  • from %APPDATA%\icqm\icq\sounds\start.wav to %APPDATA%\icqm\icq\sounds\start.wav.219def843833ea0ad1ab03509dc36cfbb965e52140af27d9d6e4f1dec1f0c647
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite.b06373ad40c08eb46c9ef961e8a5dd73e7108ef19308be9b9a5981a243f7fa6d
  • from %APPDATA%\opera software\opera stable\siteprefs.json to %APPDATA%\opera software\opera stable\siteprefs.json.e468010ae9f781763042869ca64a626461983ee88794de8d30420a7022bbd969
  • from %APPDATA%\thunderbird\profiles\10e4mhmg.default\places.sqlite to %APPDATA%\thunderbird\profiles\10e4mhmg.default\places.sqlite.5fa72419fd2667a6e62b9525032795d73ef3e4707cb86c71f50c23ba23c7c027
  • from %APPDATA%\thunderbird\profiles\10e4mhmg.default\global-messages-db.sqlite to %APPDATA%\thunderbird\profiles\10e4mhmg.default\global-messages-db.sqlite.d40c2c006594ae4a536ff5c0ac99cd4617ec8829421a12ebf079da4d92a4522f
  • from %APPDATA%\thunderbird\profiles\10e4mhmg.default\permissions.sqlite to %APPDATA%\thunderbird\profiles\10e4mhmg.default\permissions.sqlite.7375d615900ba7ecb3460d1a68fce04bc3baf12532d7856becb384f5574c067f
  • from %APPDATA%\thunderbird\profiles\10e4mhmg.default\cookies.sqlite to %APPDATA%\thunderbird\profiles\10e4mhmg.default\cookies.sqlite.37afd403006639460bbb6b0d95da2c9fc73d16cd0dc193a257e73ae69b0d943c
  • from %APPDATA%\thunderbird\profiles\10e4mhmg.default\extensions.json to %APPDATA%\thunderbird\profiles\10e4mhmg.default\extensions.json.4c4d9e768af15c2c3ba2cbea782f6e87664f9738e8bca9dbcb81e2a175ab8437
  • from %APPDATA%\thunderbird\profiles\10e4mhmg.default\blist.sqlite to %APPDATA%\thunderbird\profiles\10e4mhmg.default\blist.sqlite.75951e5b35ff533f12886b8257ff0e7aad70eeaa9f292e9853ea13e50025ab71
  • from %APPDATA%\telegram desktop\log.txt to %APPDATA%\telegram desktop\log.txt.6c0b1aebb305cfa4deef572dfd50db24aaa19f3084545050246193a068e7412b
  • from %APPDATA%\telegram desktop\tdata\shortcuts-default.json to %APPDATA%\telegram desktop\tdata\shortcuts-default.json.4582b86ed9ab5d644c8edd1dcaff8047034b93418bf0a06fc08880d430581738
  • from %APPDATA%\qipguard\sqlite3.dll to %APPDATA%\qipguard\sqlite3.dll.62453f7c4327d16676df178d784f21acb8212603ad28f9fafa6bb182d97c571f
  • from %APPDATA%\qipguard\chrome.dll to %APPDATA%\qipguard\chrome.dll.dd6e1e66b81f6cd6adce4916577a7ea1a02b00510e2c24c4301e5871aa28396c
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\prefs.js to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\prefs.js.20546f134114ba48638003bc851f6b9d768d2adf4583b247107cf8bb83e04975
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\user.js to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\user.js.a8d0dd8f89b00ac73b963de3cf893877e22970b963241de228484df9e3b65701
  • from %APPDATA%\opera software\opera stable\preferences_20150521041723.backup to %APPDATA%\opera software\opera stable\preferences_20150521041723.backup.02b0e2fd55f6ba71a21f8f3691aa7a8eb1650cc020ee254ca3fb3db3aba5e632
  • from %APPDATA%\opera software\opera stable\favorites.db_20150521041724.backup to %APPDATA%\opera software\opera stable\favorites.db_20150521041724.backup.c7c2f1cb629ffcedf1a1409b1140eb79e4430c6a1a23c2e2ffca62d2a6bd0f35
  • from %APPDATA%\opera software\opera stable\extension state\000004.log to %APPDATA%\opera software\opera stable\extension state\000004.log.83a2b3ec825965ae5f8608fbed0e37e9672761d052c64e6ef19ea91f47d64523
  • from %APPDATA%\opera software\opera stable\default_partner_content.json to %APPDATA%\opera software\opera stable\default_partner_content.json.cb63dec94f28e432af7be5a2e6774f07135cca509adef75ba5412e5b49946826
  • from %APPDATA%\opera software\opera stable\bookmarks.bak to %APPDATA%\opera software\opera stable\bookmarks.bak.82a6d54add6eb8949734b4263f2a60e61add938910cf4f6fac932e5af33a645d
  • from %APPDATA%\opera software\opera stable\browser.js to %APPDATA%\opera software\opera stable\browser.js.b4e4ed68aaaf105b5c967280e1fe6650c842362ae44b605d8a0deeffadcd077d
  • from %APPDATA%\opera software\opera stable\bookmarks_20150521041723.backup to %APPDATA%\opera software\opera stable\bookmarks_20150521041723.backup.9f34bdce68c3c79011cc78887e5b9b17763f827eec51e86d4e83571a1528c84f
  • from %APPDATA%\opera software\opera stable\bookmarks_20150521041724.backup to %APPDATA%\opera software\opera stable\bookmarks_20150521041724.backup.7dc3323d3219f7bedff02ad9a9e6b0c90491b9d8fa5f4caefa38a0d42bc6f33f
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\healthreport.sqlite to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\healthreport.sqlite.cb25b181db7ac8cf75072c5b729c4cef975c84e29ab21932b427a6224d976070
  • from %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\xulstore.json to %APPDATA%\mozilla\firefox\profiles\k0im4xo3.default\xulstore.json.4ee74eed60b86f63543ea85bb1bb1f1643008fc717e5ef37a46298b41728f31c
  • from %APPDATA%\opera software\opera stable\web data_20150521041723.backup to %APPDATA%\opera software\opera stable\web data_20150521041723.backup.4e6623204e480d9905fc1e6f4fe59da737e17329f0a144491664bf2924d47472
  • from %APPDATA%\icqm\icq\sounds\otprav.mp3 to %APPDATA%\icqm\icq\sounds\otprav.mp3.524ce7e7a4f7de200430f7108ee3ea166ee7fe219ce306dc4f6ef62b8b1dd239
  • from %APPDATA%\icqm\icq\sounds\auth.mp3 to %APPDATA%\icqm\icq\sounds\auth.mp3.14832e738225f54fb9f500ae6cf7a8b92e12f0851eb51a9c6469383cb141101e
  • from %APPDATA%\icqm\icq\sounds\message.mp3 to %APPDATA%\icqm\icq\sounds\message.mp3.19045f65fc2b24a3256c0a1ce377ca1bb6cb3a8c0e6b1a691aa23f1104d3b912
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\laughter.gif.11e73527811522f1f105367c3958815baad4c7109f64061c890be68857987a20
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kiss.gif.9e83caee0a60e98e8fae97e2fb597c7bc69ff38a3602b6e6b43731cea5a66c2e
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\hm.gif.636dd3c44e988e4509378e2054f98f6320c7fb53be83df13238fe0e399c86a62
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\heart.gif.116b11af4d757339fd8a8896752b56d73ac8c8b18587f13731db1b462ee4f65a
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\disappointed.gif.c9abc366ba20ef673cb69b73368f45170aaa7a24f954b361e6dd26f39e93ce4e
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\zloradstvo.gif.6c8129ef1299fd152911083b56fb7eb7bdb0e5571f08f724152fcdbd68533f33
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\rrr.gif.706f92dbef03304d79e961704f4a9cf7005bd44ff866de9e58cd658457468a41
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\blink.gif.0481949d69dbd396b1b5bdae3e956c0c13de4ccf5719b315a9f701461afe4457
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\think.gif.f5b5ff53f701f92cf215ffc0d62b9c912c845a553f51acb3ca19b9f33bf6727b
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\pig.gif.b7c809ede054c54298f396a22752c671cc63bd1387f0b1b9b6428984f136341d
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\tears.gif.7693d80e5a4b2c2810e949166e44771338518b4b6f8825acd863a6ecc10d2355
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\plug.gif.ca3986755c0718edf0e8fdd973c56bb56f9bb7c40a04f38bf307a9418e393762
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\live.gif.82b6b87692ad98245258c021da42a59a57f04ab478b64c64b1925e05f5abde5b
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\kukes.gif.33c7444cfc9a067e1a3571095c89f915cdb2f2de11bf523d2101ff865f2a2829
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fuck.gif.d5cc94d6848a1ed922ca2a52e8e283a2af8b8bc650b0995ac1238182944d1e77
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\fist.gif.1e96aff0402812687e8d0a364c7344c6c56c43d7318e57f5ca82edcbebf78349
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biggrin.gif.4129aa7ec420b7eac22675f3a8c7faf60b32c56fc1b095700af2eff71661732c
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\devil.gif.3c239974615d57a6b4ba3779afb9705522e8493c3967699a319b4784e4973c7b
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\detzl.gif.a383fc8ac77555fd0ae855245a1b665cac85c6d8999bfef4d9bc5d1345dac051
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\biganger.gif.c704438c534c2d2f25b93ba2a5304bbb6d7a85792b5a380df794700b997e410a
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\amazed.gif.29cc5ce0b535822d0026190806ef00743f6ad1517ef16682c86d6802a4614914
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sleepy.gif.e29edfed090d864480e80da54e417cb53643f4a5582a2686da2191e979f8f17c
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\really.gif.a8900078f9736ff38f8ce735d0bb64fce3012612d77577e8c0ba0fbb791dd94f
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\oo.gif.933071c36ae29dfc0dc3ed819e41f0d97f68281185686879c57e58700a735a7d
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\sceptic.gif.38bd792981f3601bd3d1a0d2110ccfa8c68f10e6beeb9f3be5b8b065f8939a68
  • from %APPDATA%\icqm\icq\sounds\no_answer.wav to %APPDATA%\icqm\icq\sounds\no_answer.wav.50df37747107c2f3f3832b2edc8a1f1de3a9eadfa15d39ea0f04af6433265b08
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\dont_be_late.gif.8efc7bdb90b184d860b8ebb3541e6eeafa24851efa7756aa4164ce350b0c823d
  • from %APPDATA%\icqm\icq\sounds\conference.mp3 to %APPDATA%\icqm\icq\sounds\conference.mp3.7b65d5b139c88762515e10f64c5c9af62390408d5f44efeb90a4366928074d6d
  • from %APPDATA%\icqm\icq\sounds\call_in.wav to %APPDATA%\icqm\icq\sounds\call_in.wav.a6f6ed7acc218dad95742a69cdea3cebbd58aa49d0e2bcb5887a1e3c105b3b52
  • from %APPDATA%\icqm\icq\sounds\busy.mp3 to %APPDATA%\icqm\icq\sounds\busy.mp3.a0f4f6854647381ed2bd7cead070c8e26a972a722b7c17d65c9807fd6c346723
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\undress.gif.ddbdbccd4f2679e81d7b1d0c7f21acde0ba947c2289876343e81717dbe3d6a0d
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kiss.gif.ae7495cb9f8187c853b231bd3d19af218f1cb60fbfde02025c2f2757d38c8453
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\want_you.gif.8835d4ea6a354b194c3e20736290f5aec24af22ae3e240bf31eb2cc05044ac7a
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\kissed.gif.199191b722eef007bdef8b9d7bd0802996e4080af695eb9896182d91dd0dfd36
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\on_wings.gif.670942dcece96bdeec51acb345a948450736a7051c5c53a7626cc8895d20cf4c
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\jealousy.gif.500b6ab352e9bb603d5b1fddfb7fdf60034a5aa74149b1b52277d57a5c6fee49
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\in_love.gif.10ed40a67d2c21d7a75b900fc7c48504c3e7ebeba2a2e4fa5392652f7eba9012
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\lets_play.gif.4dbc359f90d26e2e55e42b9c5cab14a8da549918a8a836da7863e37a1c9b5474
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\shy.gif.a7e800995e8273396863f81ac3c70bdd7ef347c2f0a95dcacac0836a58a31448
  • from %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\valentine\broken_heart.gif.6344cd0899e2276792d1cba1e6c3c3adb3c42a49f92da924cf49c30132b1fd23
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\coolguy.gif.bd19eb25e9b6343184821d3c55e41e4f05cf602edeac2f35d642c9c18d9ee84f
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bullshit.gif.45bfaf15ee399c82aca200214e4743dba147ba455272d7545bc134105f0d7e5e
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\ass.gif.d30d7831753de2c9807f61482eea1a9ff90f6e14c3c451ffcafe5597e1182e0f
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bazilio.gif.19e442d6692ef89f65a8a4c4c24ad0c0e39f6d276aae499cb86e04ea45eda67f
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\crocodile.gif.d6cdf0913417d547fea278eebbc427aad30409d7bfa2443c37f820c5d21a3940
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\bee.gif.dc8ba67f24f57d98d4d259ca52e215d3a1f15fcbf287c5293f5e9f856cbe503b
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\cry.gif.74c27a3de86b5673dad410f9f5155047daeb8eb02e7da3eff6711b9b6bd28729
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\vampire.gif.e3e15ad2df3b5a33242dc620bcb948e8ed05c0cf91e14ee283477fe60be1973d
  • from %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\smiles\smile.gif.2ff779c53c278a27a238ee2e4c7af42a665ffed3ce834217b4681e7335be8f02
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\04b.gif.5e564c14384a9eae1d485290e2da61cab6c93a4da18b5f8579506ea5d2850e51
  • from %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif to %APPDATA%\icqm\icq\smiles\smiles\set06\s011.gif.d2534deaf294bdcec8d24cba95742271bf870dff645a6e6ff31f2e0863d3967f
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\06a.gif.17daa6e60c494adbf66bb159255edb4718369a12d685cd7cdad5b8691802bd1d
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fingal.gif.11c5bba0687c0a2f0c7d4ebff6ca52aafd383a14ca8cce3571060f6a808d7330
  • from %APPDATA%\icqm\icq\smiles\skin.txt to %APPDATA%\icqm\icq\smiles\skin.txt.e66ddcc3429c4cb6c9010b315310232abbe2696dd3f07f58f1cc21dfc666f34a
  • from %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\uz\loading\progress_agent.gif.24ab147ae517838e05c5e9fce51b4b620cb4b96c4ae56b2489c7444396d56b6d
  • from %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ua\loading\progress_agent.gif.9cd60c80a367e2fc22d6946a18f44aeb545e08ec84d78191b0dd80c0caa8937b
  • from %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\tr\loading\progress_agent.gif.5ddba962f53108d73c4aea7176af85d10eb5d1a28d4bc783d5b15d5a2aea911b
  • from %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\ru\loading\progress_agent.gif.dfcdafd0e7b2c84adcfb16c7361006091c6b06f87835d53c50e774d3714b3e55
  • from %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\pt\loading\progress_agent.gif.b9bd85a334830969a9be0781b468defa0735aca2d67333a08d40e5c49f196003
  • from %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\kz\loading\progress_agent.gif.b3affd23183cad5f208339512038b6480e0a9105c139befe1b9699f275ab995a
  • from %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\en\loading\progress_agent.gif.2ae6bce688a705a243e7c2ce159a31419cc4471142f2a582a09b90aa654d164e
  • from %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\de\loading\progress_agent.gif.95720ce5c25e9e248f54bc5e46ee098a37f4dc18467bd1c15628e7803129bc3f
  • from %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\cz\loading\progress_agent.gif.6ce18b4876372af5041e24718a9be8e81421e61a4f95c21e8f4d30f7e428be62
  • from %APPDATA%\adobe\acrobat\10.0\security\crlcache\a9b8213768adc68af64fcc6409e8be414726687f.crl to %APPDATA%\adobe\acrobat\10.0\security\crlcache\a9b8213768adc68af64fcc6409e8be414726687f.crl.dc59e729a54c28c55f027285f5f4db9d453d8c0c701cf89d579a7dcb523e536f
  • from %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif to %APPDATA%\icqm\icq\html\bg\loading\progress_agent.gif.5c7e3b9fa57276ae3def4627af50320bf030f0488e6206339bcc4abadedcad09
  • from %APPDATA%\icqm\icq\database\citylist_kz.csv to %APPDATA%\icqm\icq\database\citylist_kz.csv.31cef6769cb682e314e8c1feb9b87bf0c35878ac5975a762814e14b359149b4d
  • from %APPDATA%\icqm\icq\database\citylist_ru.csv to %APPDATA%\icqm\icq\database\citylist_ru.csv.6ac7d48ce481680c063e46050e71bf37bfc05fd2311ef9cf39e9068821313d19
  • from %APPDATA%\icqm\icq\dll\mratag.dll to %APPDATA%\icqm\icq\dll\mratag.dll.ea416a70e6b2f32d5419d6400ab090d1bab967c9202c1d0e37f232dd20e21517
  • from %APPDATA%\icqm\icq\dll\mousephone.dll to %APPDATA%\icqm\icq\dll\mousephone.dll.0200f763bdbbd50711b33ec1f28d408ee578620e758b8afb04e835d8f7a8dd38
  • from %APPDATA%\icqm\icq\database\citylist_uz.csv to %APPDATA%\icqm\icq\database\citylist_uz.csv.94b9c46168eec5d73f09ad0ea1babc61a7f0852e48c140f16efd2c8f112a541b
  • from %APPDATA%\icqm\icq\database\citylist_ua.csv to %APPDATA%\icqm\icq\database\citylist_ua.csv.60cf93d5d1f3ec4aa2d972daaef88cf7a3f5edb2a7688e1da57aa7e17a1d5778
  • from %APPDATA%\icqm\icq\database\citylist_tr.csv to %APPDATA%\icqm\icq\database\citylist_tr.csv.1a1a0e5b9767c411b3e0892192da26885ea2e6e9a75dbe707bd14dc3c2bb5c71
  • from %APPDATA%\adobe\acrobat\11.0\security\crlcache\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl to %APPDATA%\adobe\acrobat\11.0\security\crlcache\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl.80aacc18f5672761423c0a09632b0df0251bd688c3a5dfdd9e768bdae6341e08
  • from %APPDATA%\adobe\acrobat\11.0\security\crlcache\48b76449f3d5fefa1133aa805e420f0fca643651.crl to %APPDATA%\adobe\acrobat\11.0\security\crlcache\48b76449f3d5fefa1133aa805e420f0fca643651.crl.2b4a9902ae7538544f520908fe4595aedd6074980876771528b5cacd364afb55
  • from %APPDATA%\adobe\acrobat\11.0\security\crlcache\a9b8213768adc68af64fcc6409e8be414726687f.crl to %APPDATA%\adobe\acrobat\11.0\security\crlcache\a9b8213768adc68af64fcc6409e8be414726687f.crl.e93bd57177835e5f9fbdd64456e2d04aa06d8d2c5c11feb73eb721ea0370d818
  • from %APPDATA%\icqm\icq\database\citylist_en.csv to %APPDATA%\icqm\icq\database\citylist_en.csv.8653625a009da7cd6c2fe9717b55dc17fcd5b7e248a0a3b8a4fb544e9c4c752c
  • from %APPDATA%\adobe\acrobat\10.0\security\crlcache\48b76449f3d5fefa1133aa805e420f0fca643651.crl to %APPDATA%\adobe\acrobat\10.0\security\crlcache\48b76449f3d5fefa1133aa805e420f0fca643651.crl.8fe76c0c6142c99cfd7beaffd2eb8c6d0bec259510c5e5c529ce4b11c9236445
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\car.gif.d1a638d67ebee4faff5f0557c1fca753520fbafcfd9767ed3fdb1ef8a3cee938
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\ring.gif.6a94074c0ab87e66b356b89634118413c6cca662e58777320e5e2ce2c631d67e
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\eat.gif.3e20e4fe5aefe06c751959524e34947d24b7e49387856b608c899321b958a85a
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\devil.gif.7f1e492d1b8c314a7c43cee6ed4cbe2f1828d20269e2432ac4f8174a13e00631
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\dance.gif.94411066ab71dd7ebd8e758d30cff2a6bb5ec6e7f4ae664f6919c48b1fe72a65
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\cry.gif.a63aa09ab638755fa8a858353f732958a149635d70db52eca07e2385dd968207
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\could.gif.8d16b72f0139638879cb605c5139cb3c652594faa0d7667753c71439ace52435
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\blew.gif.b225ff2ef49d64e89d79b4f9f74d6e294f2067ea10d824218955a08add80a505
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\appl.gif.fc1400dfe7f8f04e7b8e77d13e5fbc6aa37c7a16003652fa10a89f3a9325a512
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\angel.gif.48c4742cc09dc077e1fd4cbb4bd47d274e06615ebef289e0c3d97b80c94b811f
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beer.gif.7d63ecf9e9f418596742b3c8501cd4bdc4843c1895e1b0c3332aa5add61bef05
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\beauty.gif.0ff8c644d981972a7ec68314d502f6e538ea368bbf7fcbfcc9738bfad34c3235
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\doll.gif.972b38454faaa0a7ba106b5eae2d012d28a62eb52592f1a148e492dc5a1ba30d
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cookie.gif.09814405a219c9232f2dc2c8bfe0de3fbda5e8715fbb8f9abb35969bf8af9231
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\shoes.gif.05b6e1bcc1c5e92de0f68a22bb0c6d34811b7107552765a2151ef6dc21e5e444
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\perfume.gif.de06e4a9cd0d1fa3a1a1fbda0aa84a8f6de77423c70376f62ba4b569e7d3f33e
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\new_dress.gif.d9930690aac9c1dc488f96331f535b56447ce4662680dc28f9bb84773503be32
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\mad.gif.8d6274660cfc6047ea69c21e49b525f72adf33df6bb8aac452a980834efcb97e
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\love.gif.17868a669faee016569b012b58b18916edddaea2e8d253271822f7df73942515
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\flowers.gif.19a31399ddd7a78e9b53f8b0a64906ac2b26110fdef1586039bccefecd4b223b
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\joy.gif.4e7b4e8ab59305543071c4ceb910941b4e41a2fb715ab1abc2852ea239efa374
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\hug.gif.11f13a341e5f7726d8de851cc6b02bb4869c7dcf460a2a3e6d3b32185ef88501
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\cat.gif.433770b10c5f5b828358b108262b3206804909b6f231fab5a57156f0f009ac2d
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\drink.gif.24705317ae7d8d66f899348f393e3513bec514600995dfee9134c7bdcd074b18
  • from %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif to %APPDATA%\icqm\icq\smiles\smiles\8march\sunburn.gif.6c3a3e4f3d2d41d7115791fe84effaf1eece36c9c576d970b73529b9cf26114b
  • from %TEMP%\uxeventlog.txt to %TEMP%\uxeventlog.txt.3d4758174a4f6fc3ebf2e3e1b587c65ab7c87b69f50fd23155319c3c60fe4803
  • from %TEMP%\wmsetup.log to %TEMP%\wmsetup.log.34f63d13ee97a2d3936cd82daeba7edb525a136f5f50aad45796075c1a982312
  • from %TEMP%\setupexe(20160310130820744).log to %TEMP%\setupexe(20160310130820744).log.04b3da9942999e8ec177c145b228e738543778347fa22045877a70b165e2ac21
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\wdscore.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\wdscore.dll.c08d921a79f72a59d4480cba70709840ea310a8176ca20a0bbc8087088415839
  • from %TEMP%\dd_dotnetfx20error.txt to %TEMP%\dd_dotnetfx20error.txt.4d85a6de2929b87976b1a6da236e33d2860514da2e7130db4abdcbbfd998bc32
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\unattendprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\unattendprovider.dll.bf0fe784dd23c38695414cb50de577e3c7586ffdc18ec60a4844d30c52e7a516
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\wimprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\wimprovider.dll.6a507cc78588ecc7bc785eb19004bd90014595d19616d7fd2ebec96855b7f277
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\transmogprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\transmogprovider.dll.394d9eba55c4ee826936ea95dbc5276a5ae80a2c229008bfa054ec1f40c91f42
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\osprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\osprovider.dll.47120d7de59ccc50afa482429c4812902ee9fe02235ff20ffa0e73e1f3f15b6b
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\logprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\logprovider.dll.35edb3611285125e5b03800228303ebde625d6e1ea1a7fc8f0e7c7fa7f3a905d
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\smiprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\smiprovider.dll.e9c063bbbe50b0b908c3c3206c7f6135b0fef04fdc0862b9ef96e6fb1ae8ad73
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\intlprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\intlprovider.dll.f31a6a5116f91c67b180d5df25e945ccb59265b0ba55a938d54417a897528c23
  • from %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt to %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt.44bdb2ac5207e93576e5986a573f8dd2360eb3abda664a0b34f637dd9d8cba6f
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\msiprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\msiprovider.dll.d9b792726c691949a5b0f3beb6954432a633d970c68d71f45bae44d20651da75
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\cbsprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\cbsprovider.dll.febf9b37cd41464b84cc1c2dac8aca8c9881fc70efc88524402de421778e086f
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\dmiprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\dmiprovider.dll.e4e20f3c4a08b6477b81ba36ca9f386e2ef3ec888d137f0d5ce012d43bd98d2e
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\dismcore.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\dismcore.dll.72f8e1905b3b1fdddea4d8d4d5f980f4c729915bc2f7c88d085db86fa742a84a
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\dismprov.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\dismprov.dll.dcc06faf269a68ae92f23bd32bc26c413b0f529b0f33b29b155742987981111c
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\dismcoreps.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\dismcoreps.dll.3a54fa14a517d32c0646bd76f1b38a71bb31f7116588b6cc5ae1999f7b4adf79
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\compatprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\compatprovider.dll.0a47492f9a16a9bc441714a72002921ad0284dc2240cbcdfaa8202335e76d856
  • from %TEMP%\aspnetsetup.log to %TEMP%\aspnetsetup.log.53b5c1b7105eb2507ed46a4cacbe237df163486fd6f92a8434ace2d13e72115d
  • from %TEMP%\adobesfx.log to %TEMP%\adobesfx.log.7a2406a06b97c4eadd907b6e28ba5e8a0782d1694b918cb3e1d08a2e042d9159
  • from %TEMP%\adobearm.log to %TEMP%\adobearm.log.b38222cabff91a637b5cc57e9abf20a3592e58b575006827974d7eaaf4467075
  • from %TEMP%\aspnetsetup_00001.log to %TEMP%\aspnetsetup_00001.log.eafb686487a80073fc25c567cef24db71905e9bf6fded2f66402300996c62947
  • from %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\folderprovider.dll to %TEMP%\d0ad2210-04b7-4271-99ef-afd86e35f1fa\folderprovider.dll.992fc04f9e6e27cf03763ca015450898153bc7912e5b973fc3f1e78e83d87707
  • from %TEMP%\dd_dotnetfx20install.txt to %TEMP%\dd_dotnetfx20install.txt.900bae2aba1ee06d091b1ed39cb4c137ad4f2f50b3a5325dd10b643c229cf116
  • from %TEMP%\dd_depcheck_netfx20_exp_35.txt to %TEMP%\dd_depcheck_netfx20_exp_35.txt.9da5ae93dbbf2a0cf1d5988326f4c16749a86f4a2fa1524de674c38fd97f505b
  • from %TEMP%\dd_ndp471-kb4033342-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp471-kb4033342-x86-x64-allos-enu_decompression_log.txt.b4534ead092b8043df945ad0e3a03c7f24df08c43f1674f98403b2b4b98cd57a
  • from %TEMP%\setupexe(2015112320514461c).log to %TEMP%\setupexe(2015112320514461c).log.820ff109f010bd5a30d6a7f789666cfc9a0687ebe8d3a541f37ce3d602c10174
  • from %TEMP%\jusched.log to %TEMP%\jusched.log.64477a0ea284e7e5cf8ae1de6b1529f541b4119117837112ae90109a7d09d428
  • from %TEMP%\setupexe(20160310115346604).log to %TEMP%\setupexe(20160310115346604).log.bc2b947b6819d7e79aa417289cce49b1b7934a67a3c5a3c50eafd969378fd023
  • from %TEMP%\setupexe(20151123200526220).log to %TEMP%\setupexe(20151123200526220).log.c0aacb26e473c24d85c4982029715e0dc024e62e9198eb54e0881627adc49c7b
  • from %TEMP%\setup00000604\setup.chm to %TEMP%\setup00000604\setup.chm.23f3f54ecf8c352debfcd77763fbf1a6344928dc22839d762636c2cf34b46d34
  • from %TEMP%\setup00000604\osetupui.dll to %TEMP%\setup00000604\osetupui.dll.14dc8d7c5de7bc235e2accf87a2ed26f616de883da5faccf7a82faab1f37852c
  • from %TEMP%\setup00000604\osetup.dll to %TEMP%\setup00000604\osetup.dll.71920d35a611beffc1d95b55069000176abec6cd3ef95dc87f52c28ecd7deb40
  • from %TEMP%\opera installer\opera_installer_20151124191101.log to %TEMP%\opera installer\opera_installer_20151124191101.log.bd57f293c8aabdb338f57355165071996c08d7921360f48eb87e68dd2978054c
  • from %TEMP%\microsoft .net framework 4.7.1 setup_20200610_190724234-msi_netfx_full_x86.msi.txt to %TEMP%\microsoft .net framework 4.7.1 setup_20200610_190724234-msi_netfx_full_x86.msi.txt.f3b4188a68fbbf1e12ee067718a562a17730689e0dc93f13590bab795ee05e72
  • from %TEMP%\opera installer\opera_installer_20151124191100.log to %TEMP%\opera installer\opera_installer_20151124191100.log.060681fcfdcd84c4bdb9488e283e8e1e3850fcefff49d79c68a6f62678661b2c
  • from %TEMP%\msi65b93.log to %TEMP%\msi65b93.log.3974e49f9093535825d5e1ab8e4d7286d19eb494da12eea63615999856690045
  • from %TEMP%\microsoft .net framework 4.5.2 setup_20151216_194133359-msi_netfx_full_gdr_x86.msi.txt to %TEMP%\microsoft .net framework 4.5.2 setup_20151216_194133359-msi_netfx_full_gdr_x86.msi.txt.2dbc05ddda0cec4739eefff3afe97953eafb8076bbe5252a9a60510a00971d77
  • from %TEMP%\java_install_reg.log to %TEMP%\java_install_reg.log.3174dbd6d378316f3455e1ebd9bd5be8b1173d9ed7127a62a5c3f7489863de0f
  • from %TEMP%\dd_setuputility.txt to %TEMP%\dd_setuputility.txt.db504c4d78932ad8e00609d2e4eadd240d3e91d5a6bda2c68c292677bd706825
  • from %TEMP%\java_install.log to %TEMP%\java_install.log.4f9693602a9e22418ac65b0ebd8fe7d29e4b9549c2c282c5375d49b78a9acf37
  • from %TEMP%\javadeployreg.log to %TEMP%\javadeployreg.log.73a3643ff05c674272c6772e8de9317241da57cc5a49fe653c30c4611e221129
  • from %TEMP%\dotnetfx.log to %TEMP%\dotnetfx.log.57a8f180080fe90d37547972e5abd0068140e0b854c40edf918259f910995358
  • from %TEMP%\dotnetfxsdk.log to %TEMP%\dotnetfxsdk.log.ad049027f9219a3bf5bc54476e3c0fe81f4e5bbe2d919074ea5fd91373e3a023
  • from %TEMP%\dd_wcf_ca_smci_20151217_034618_164.txt to %TEMP%\dd_wcf_ca_smci_20151217_034618_164.txt.49cdeb464cc53448e9b60c91cb384174703444cd053a06f64783cf52e336e87b
  • from %TEMP%\dd_wcf_ca_smci_20200611_021138_590.txt to %TEMP%\dd_wcf_ca_smci_20200611_021138_590.txt.c9b2b0fbbdc367985100fe8fed4a6442541bb19e62520ea2f9d221ce319a485d
  • from %TEMP%\dd_vcredist_x86_20151216192525_000_vcruntimeminimum_x86.log to %TEMP%\dd_vcredist_x86_20151216192525_000_vcruntimeminimum_x86.log.441543b80adc0451cc76c8e21e37a1aaa9d49d9b035daf506f387d1ed7599615
  • from %TEMP%\dd_vcredist_x86_20151216192525_001_vcruntimeadditional_x86.log to %TEMP%\dd_vcredist_x86_20151216192525_001_vcruntimeadditional_x86.log.e763fd702e59dfd475e0f6b2a20e97ba928196373a6a367e3029782ef78a6c22
  • from %TEMP%\dd_vcredist_x86_20151216192525.log to %TEMP%\dd_vcredist_x86_20151216192525.log.f6ea3da0555d684c2b7f4641c627a4a09f527d4c5f5327f2e8a672c5cc806a0f
  • from %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt to %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt.f81ebd12ffae97aed4d3a53ec984e3baa739f9f8a609ecf2c2a6f041aa58d215
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\fight.gif.bae17ee8eed39fbb092c559fb4202d62fdb2c252841fa88a2dbe1bfaf7684178
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\book.gif.bb5c3ed9bb39c21cc1d6b984df4f1e29866e33490148d7461d9928bf70e6b175
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\11a.gif.83e4d71ddfca8da0a0be794428add69ca54c538691311464e702b89f0c539e64
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gift.gif.f63f5fa3dcfc2cf05810e49a129182909c5b10fe289b07d0aa92a86f9565d676
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\i_am_so_happy.gif.88a70490fe5e419ebeaa915538a1d5c6bbcabb6da47967e149d704e75d78664e
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\diablo.gif.1e4aed7396b24392cf8eb82163a3b305c68bacb6d0d0b5ebe877b3b7af887c72
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss.gif.420f9b96c7ce540c4b06a6ea1b97825d8752de82e8c0455c3710f50c9a593c56
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hi.gif.ad02fe451226650351afff1caed0bbb4526b6436048fb1adad505c209c964a38
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\hang1.gif.c2510ea92aecfbf16bcc93c854ee2bb0ec5f9e5675bf113bc126b0fe41d21660
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\drinks.gif.6a6a4b6a5f0bca077613a9287102abc345d3d24ce5ca9fb9fc8f18214768e757
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\good.gif.2fbc6b6e2c06773bc53f35155dd7426910c60447a4dc674e88af0c5dbbc2d37d
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_heart.gif.1cd28955d6773a68d41f2c38dd7a40b77b0737ab700a8c65011cee0805d7d76e
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\give_rose.gif.b53e248bc6282b6a220e2bb66ff8e953ca3bf21c26dfd79701493c8bcf222827
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\girl_angel.gif.914004ae34dc0bf47f752ef137f145fddbd0f148459e072341b41d1532446415
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing.gif.84b6f20e7aab971fc96dbe6d4fa641c8365f4f527658cdd9849a5fa27a71863c
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\gamer.gif.675ae552d3fdb064335697f3372a788075617d2d131abdc32b56bc65bb4f120d
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cry.gif.81167ce6940d76f5d32f9ba8f5aeb19e729026b5a280b9ce4e01e0569947f61e
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\dance.gif.58618e088f18700e254a675f1d5581a80e2ca27159890157b5fbc25b1911e127
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\crazy.gif.29d0cbc89960748bdf4c1858c4298d391ed08bbfc3e9d4304fe1d56d00d0f379
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\cool.gif.c0cfb3aa88677eb04fbd0f5988f6846186edb3b1889a415fd4fe833159ce536b
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bye2.gif.4643b604c77ccb1fe56d3f0e5cb817ae3ad34c1c0c911ce7bea77705831bc777
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blush.gif.16b61ca0835480cf2c98ad2669c9ad44cf875d7dcba193d45eac818edf32732c
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\blum1.gif.96faa16d8d0fe8d456f5777418d497619aab2048b02c7d44e482bb4925cbdc20
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\biggrin.gif.f75d92215726269289cec58ce3fa9017fcc550455b83aa3ca60e731f831eb772
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bomb.gif.0b87f2128d177a20fa2aa1d7fad9ddd54f8707a54771a04666a37edfdf8f2e24
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\bad.gif.e8444d13952860bb2499d9a57f6be67d7c49ffec80c33b4bf6c8acce5d00920d
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\ireful.gif.c28593c1603104d2c7b975f35bc093870337fe05110b98f5ae277bdea6bd9531
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\air_kiss.gif.99feff85cab78ad463540c38fd2b0c570834305fe917c78fc72bed13eccb3a1e
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\kiss3.gif.ef45e168886a581abcf0aa0f2d9b54feecad7c388379811b7d0d66339bdb9567
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\smile.gif.9cbee5693f1bb9fbeadc3c7cf0229225a33b3ccee9a94c3789ecdbec8727de10
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\09a.gif.64c79825b4e6349b22fd43ea3b870a36667389fa8879daae4a5039a860c6786e
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\08a.gif.6de8f0e3a9c9a56c97a6f46bad4cbb518220d5c7f927856db694e3e4e99b0b59
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\03a.gif.9b1f587f3de04aff8b82844ed2ea7efd7d747e4b41f463189045d676d90ef040
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\02.gif.241c15088772144db9c9f60e8c0fe1c06456f325ca127186e40d0f2133a3d263
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\01.gif.277f071d65c07ac49632fc027c78c07b6b54d942107811bb24d98e8c85e30a20
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yes.gif.bcb945934347fdd1ea7661848fe68dcce82d077fb8cc4baf82c67390d9dee023
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\yahoo.gif.e289d993536711758eea7e8ed815657e60261ceed0cd472eb40a20f77d02874c
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wink.gif.4ee63dedb357a19245703b8457de4253dd1ab5a7a8461b9297d7e08b59acde7e
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\wacko1.gif.cadf2bbdeb1d3fd6e7d731deebdf33aa65cb9379187e4cf4e6ba23239ecda517
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\unknown.gif.827b822d08db10080ff2b1d9942f40dd270d13f48e2175e7d372244f3ef34d79
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\music.gif.4df1474211aa77437364d21a3dde68e7bbcf717ee5fa858f3b1f4fb792113123
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\lol.gif.7237000360c3695bd897ef95aed6aae2cee8e827c732feb260e5221c05c91518
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sad.gif.bec1b98e3d9619188891a528db8cb7824b73f93415be088a4dec10104eafbe15
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\rofl.gif.962c091f10783be0825ab7a022c6ef225d1149538a4f09824d4237b2d25b9e38
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\pardon.gif.e7879d9bf3aa73a9ecdfe1882781a60b4976f7533191a82455f3b0f7eacfb420
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shok.gif.49e3e80aa6aa1703ed1652fe4f924504b4455c3d80aad6f2de27ba20841e8515
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\shout.gif.ec794b2b0081edfeda2797c68a6700d5e43f47fbc2c65930ca725a18aa1be576
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\scratch_one-s_head.gif.ead4593fe9d9f41c5b6bf871ca68f62ea7944b0d278c8ee18be1e4191fd8fa03
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\nea.gif.144689ace7f3216c6be2a06add0ced6d1a02994af47f1c449d23f1c73bdf4516
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mocking.gif.3d0a321595122f84819d07aa93e946e56bbaaf15094017ef821ccf9702ea3e3a
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\mad.gif.a5961096522d1c135fbfe1957fc931faa0398df6bfff567925b946105ce86a77
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\man_in_love.gif.9c0d940ae391bf9c8aff20971569331ea106fd01f811abf0e61b5caa54ce992f
  • from %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif to %APPDATA%\icqm\icq\smiles\smiles\koloboks\sorry.gif.225a8dc4b8604fce75afff9cd89a2708c31d120526a1e26c9d3cd2ac1e43321c
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\tongue out.gif.c4d8554331856f252054752a8c811553d1d3c587fcb7f76062d36986943b822e
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\sad.gif.f14886735410e2496d54f80c4be984f828301066f65d1dc54bedf01df5cccd42
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thank you.gif.b80e441e59b1257b5e2189bf079cbc6077d1c0822d999d216123f635c79be32f
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_attack.gif.58297207fb161c128a140ffc923dc8740978a472e9531bc12e59d1ce18912033
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_hand.gif.375f604342d6c09b786cde4b5f1a3e42fc80d5eadb352cd858e521bd09da9c3b
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\wonder.gif.68ca9374c57b41cb0f628b16fdc537e632d59363b0d7b9a3906e09a544e5a539
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\victory.gif.6df250db92f9d2b536363d0a3e75193f33fdf73e7e2c8b0dec865d8e2570365a
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\tongue.gif.1e4322e3502d44f6980c80966ec03c6f21ea490646d3e36c31f116cae96dfd17
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\smile.gif.81ed3ed6f282037ce395c068172a2c113faa70558bff254c7190ebcd8e27382e
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sleep.gif.da328128e68f83d1c02a824dd337d41307b4793a75f8563df2f8ead84e956851
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\skuka.gif.b65ebc92e9b9660a63dc24063a104312080d0e7a17a8c9f5b900b1a76d6e4740
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sad.gif.ac4de40247432201e5ab2c8024a26aca091988a6d7b9d4dca8d0a21212236503
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_meow.gif.23f64449f14ff8575b770ae570f55230d0b1bc5dcc1e5005ac515c0254031425
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\sing.gif.fa2bc0239cff83ec2e735a92850dfe0a1d665af914416c7419523445dd094f2c
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\poison.gif.ab6542cbdf0991d0a5290136b567826f245e2924d045a6890a5171da814dd13b
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\rainbow.gif.c1a529fe4d77a05eac374ca9680d470808d44cd3d7f3cbad8a98d2dc3c30413f
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\pistolet.gif.36816299fd6d63197071b2a5b9a751dfd9cc0545193c19996488abb3a3d15619
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\love.gif.48765cf3d8fb43441685b21b34f4d4eeb701b27fcf0b4312d70c618b8f4a4623
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\kiss.gif.33d30f7d5d40ca48567a05474bb242944c43e97d98fc2a5108e934e0ee3ec634
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg.gif.6a04362b2bc700cc3e5bc7a1e1b79d66c32ec5f68df5ce401f3ccd684e04ad48
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\gg2.gif.34645f06b6fd81405eea9da14204c3f6cc86bdf2d82da4f82a6b2b1d35c6b225
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\hungry.gif.3a7d1c387277a9ece6d0ca5e5b27f9543fcf970341c5a504eb17160ad315884b
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\flowr.gif.8b3f04cc7ebec86059bcb9b2a6119ae92915be00bbf36ea3016189e237cf3144
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\history.gif.c591f017173a43cfb346adfd01f87f76ca96ec1a34eadfde33e74919e6021436
  • from %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif to %APPDATA%\icqm\icq\smiles\smiles\animated\red.gif.982009718660567b247c86bfd1bae5f55fe09667f3001a1bb1e853c597cc445b
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_mouse.gif.12cf80b60e6bde599a7426ac7065910a7bcc62629157e92575a89ba91265b71c
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_lick.gif.fc4b84f063a208f94bf9375ccfaca0cf69f27c63e906dc639922377932434647
  • from %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif to %APPDATA%\icqm\icq\smiles\smiles\cat\cat_paper.gif.54622fffb9cfc7cea33269865736f49e0ab40cde9591ab7587671418620e5f63
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\stop.gif.32f51360cdb1b69ff82369d55c53f11bdce64e6495dfcc279e203716be21df55
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\laughing out loud (lol).gif.8314978757e30a11344d464a6f996e760797e76e9543b0af3b78b5d18515d274
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\scream.gif.ee7ffbc06050f9d1fbd3e3566e20740ccd433475ca8716bed99438d05e01f910
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissing.gif.6ad4cb6bd4917523c21b8452d3c1ab2d8c3ce79581d5ec6d7f043889b3f4f414
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\listening to music.gif.35b4ed98a67a382a0244b295ad7965931d3662d9a14cfc455c9c4a4f8801d11f
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\thumbs up.gif.f062276c533457f3192610e87b541e8e0b3fe343c4b0b1eabee3f49b6b0bea29
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\surprised.gif.251722378339143f80f80ee822b41f1424c19bb21b829065ab1861a5988b2862
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\smile.gif.bf4854492d4fc3a82eb922dbbf66df8bedfd500f72a7113669c683613d1dbe19
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\nothing to say.gif.3927a1cf5e673ec4baeb8f20666bbce9d29a386daaf6a809954e1d70ca1eb011
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\mad.gif.c95d185b052a0b958ca2bd606849312ec6d0db73b7e0d1fa1ec188e80988fc53
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\bomb.gif.ea526ec260f1427bb6b09a9048d669f074818ecf489f2131450f967048c84251
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blushing.gif.2e4cc98663bd658f26b521e9d96de16ac49bd8fe3f691ca7e5904a84e05da163
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kissed.gif.1469899e33281040edca8398e36d0e29709229d257abc811cfdd0b4911ef0875
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\blinking.gif.820afdc968def05c4e620504e303f870303b77b9349480c39a748f884dd0e26b
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\kiss.gif.6711b02588df318c770536d0a07c8a238906315cb126950566ec39f54294ea12
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\in love.gif.745f925e5cd2d0266c422e72badc5d7b77cc632798965cead72ecda23d427f52
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\gross.gif.6a638279bef09ccec512106ecf9c5d7d23799807deffdcb7b0a041a8a534f539
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\falling asleep.gif.1c317b78d75bf77ef8a74744ce718baf7b8a49d7a2c33993b91964cc92fa365d
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\drinking.gif.ca3a1435d49eac8e141734b3f0aa8bc23fd5d2b9cf91288d35b3849ba3037724
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\devil.gif.e8cc85b6415d972f90d965ebf5b65d9568393f42a67803568e2dd63298bf2e5d
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\crying.gif.376eba2d496a68b40d0bf499ed0be0da099469de0adb897e822fdd6b55189332
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\cool.gif.5b2dfea682af9b8dd2cdbf55bc5173fb6cf770ef773b4288c6590747e07ab575
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\can't say-shut up.gif.3a18f15e101c2d1ae4cbd14fd55076505857d1848cac8c002b1bc660ae63542c
  • from %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif to %APPDATA%\icqm\icq\smiles\smiles\icq6.0-emoticons\angel.gif.273eaf49619ade706aef81ca816624a3a7e199f237d5a563002e6fdbc0bb2e60
  • from %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif to %APPDATA%\icqm\icq\smiles\smiles\odnoklassniki\10a.gif.4cc9825f9c824cff8b4ceb51708a0c6895e8943d20643d0a705786120c83ce4d
  • from %APPDATA%\thunderbird\profiles\10e4mhmg.default\webappsstore.sqlite to %APPDATA%\thunderbird\profiles\10e4mhmg.default\webappsstore.sqlite.922226c9bb6cf01a16e2a15b44cd64f7de5bff61a826772e9763a6410b1ed96d
Modifies the following files
  • C:\msocache\all users\{90140000-0011-0000-0000-0000000ff1ce}-c\office64ww.xml
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proofing.xml
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.cab
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.xml
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proof.fr\proof.cab
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proof.es\proof.xml
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.cab
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\proof.en\proof.xml
  • C:\msocache\all users\{90140000-0018-0409-0000-0000000ff1ce}-c\setup.xml
  • C:\msocache\all users\{90140000-001b-0409-0000-0000000ff1ce}-c\wordlr.cab
  • C:\msocache\all users\{90140000-001b-0409-0000-0000000ff1ce}-c\wordmui.xml
  • C:\msocache\all users\{90140000-001b-0409-0000-0000000ff1ce}-c\setup.xml
  • C:\msocache\all users\{90140000-001a-0409-0000-0000000ff1ce}-c\setup.xml
  • C:\msocache\all users\{90140000-001a-0409-0000-0000000ff1ce}-c\outlookmui.xml
  • C:\msocache\all users\{90140000-001a-0409-0000-0000000ff1ce}-c\outlklr.cab
  • C:\msocache\all users\{90140000-0019-0409-0000-0000000ff1ce}-c\publr.cab
  • C:\msocache\all users\{90140000-0019-0409-0000-0000000ff1ce}-c\setup.xml
  • C:\msocache\all users\{90140000-0019-0409-0000-0000000ff1ce}-c\publishermui.xml
  • C:\msocache\all users\{90140000-0018-0409-0000-0000000ff1ce}-c\pptlr.cab
  • C:\msocache\all users\{90140000-0018-0409-0000-0000000ff1ce}-c\powerpointmui.xml
  • C:\msocache\all users\{90140000-0016-0409-0000-0000000ff1ce}-c\excellr.cab
  • C:\msocache\all users\{90140000-0016-0409-0000-0000000ff1ce}-c\setup.xml
  • C:\msocache\all users\{90140000-0016-0409-0000-0000000ff1ce}-c\excelmui.xml
  • C:\msocache\all users\{90140000-0011-0000-0000-0000000ff1ce}-c\setup.xml
  • C:\msocache\all users\{90140000-0011-0000-0000-0000000ff1ce}-c\proplusww.xml
  • C:\msocache\all users\{90140000-0011-0000-0000-0000000ff1ce}-c\propsww2.cab
  • C:\msocache\all users\{90140000-0011-0000-0000-0000000ff1ce}-c\propsww.cab
  • C:\msocache\all users\{90140000-0011-0000-0000-0000000ff1ce}-c\owow64ww.cab
  • C:\msocache\all users\{90140000-002c-0409-0000-0000000ff1ce}-c\setup.xml
  • C:\msocache\all users\{90140000-0044-0409-0000-0000000ff1ce}-c\infopathmui.xml
Modifies multiple files.
Modifies user data files (Trojan.Encoder).
Changes user data files extensions (Trojan.Encoder).
Network activity
Connects to
  • '91.##8.114.30':80
Miscellaneous
Creates and executes the following
  • '%WINDIR%\microsoft.net\framework\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\idzybk1q.cmdline"' (with hidden window)
  • '%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBA69.tmp" "%TEMP%\CSCBA59.tmp"' (with hidden window)
Executes the following
  • '%WINDIR%\microsoft.net\framework\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\idzybk1q.cmdline"
  • '%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESBA69.tmp" "%TEMP%\CSCBA59.tmp"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android